Halcyon · Run 3completed
recall 20%found 5 / 25reported 7cost $0.113tokens 94kduration 17 minengine 98c06f3+bp2
Found in this run — 5
API:3001 · Node2
HIGHProfile IDORCWE-639
MEDStored XSSCWE-79
Cloud:8081 · Flask2
HIGHDebug console exposedCWE-489
MEDSecrets / env disclosureCWE-200
Legacy:8090 · PHP1
MEDphpinfo disclosureCWE-200
Missed in this run — 20
CRIT SQL injection · loginCRIT Admin command execution (RCE)CRIT SQL injection · loginCRIT Command injection (RCE)CRIT SQL injection · loginHIGH SQL injection · searchHIGH Excessive data exposureHIGH Orders IDORHIGH Broken access control · adminHIGH Unauthenticated password resetHIGH Public secrets / env dumpHIGH Public path traversalHIGH Weak JWT signing secretHIGH Resource IDORHIGH Unrestricted file uploadHIGH Template injection (SSTI)HIGH Unauthenticated password resetHIGH Authentication bypassMED Weak signing secretMED Backup file exposure