Skip to content
OpenAdvisories

Vendor

hahwul

4 known vulnerabilities.

Products

dalfox 4
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 10.0
    CVE-2026-45087 Public exploit

    Dalfox: Unauthenticated Remote Code Execution via `found-action` in Dalfox Server Mode

    Dalfox is a powerful open-source XSS scanner and utility focused on automation. Prior to 2.13.0, when dalfox is started in REST API server mode (dalfox server), the server binds to 0.0.0.0:6664 by default and requires no API key unless the operator explicitly…

    hahwul dalfox github.com/hahwul/dalfox github.com/hahwul/dalfox/v2 Go