Halcyon · Run 2completed
recall 20%found 5 / 22reported 8cost $0.092tokens 63kduration 18 minengine 98c06f3+bp2
Found in this run — 5
API:3001 · Node3
HIGHSQL injection · searchCWE-89
HIGHOrders IDORCWE-639
HIGHPublic secrets / env dumpCWE-200
Legacy:8090 · PHP2
CRITSQL injection · loginCWE-89
MEDphpinfo disclosureCWE-200
Missed in this run — 17
CRIT SQL injection · loginCRIT Admin command execution (RCE)CRIT SQL injection · loginCRIT Command injection (RCE)HIGH Excessive data exposureHIGH Profile IDORHIGH Broken access control · adminHIGH Unauthenticated password resetHIGH Public path traversalHIGH Resource IDORHIGH Unrestricted file uploadHIGH Template injection (SSTI)HIGH Debug console exposedHIGH Unauthenticated password resetHIGH Authentication bypassMED Secrets / env disclosureMED Backup file exposure