Halcyon · Run 3completed
recall 8%found 2 / 22reported 2cost $0.038tokens 43kduration 10 minengine 98c06f3+bp2
Found in this run — 2
Cloud:8081 · Flask1
MEDSecrets / env disclosureCWE-200
Legacy:8090 · PHP1
CRITSQL injection · loginCWE-89
Missed in this run — 20
CRIT SQL injection · loginCRIT Admin command execution (RCE)CRIT SQL injection · loginCRIT Command injection (RCE)HIGH SQL injection · searchHIGH Excessive data exposureHIGH Orders IDORHIGH Profile IDORHIGH Broken access control · adminHIGH Unauthenticated password resetHIGH Public secrets / env dumpHIGH Public path traversalHIGH Resource IDORHIGH Unrestricted file uploadHIGH Template injection (SSTI)HIGH Debug console exposedHIGH Unauthenticated password resetHIGH Authentication bypassMED Backup file exposureMED phpinfo disclosure