hahwul

Products

ProductCVEsExploitedLatest
dalfox4–May 27, 2026

Exploited and recent CVEs

  • CVE-2026-45088 High 7.5 Dalfox: Unauthenticated Arbitrary File Read with Out-of-Band Exfiltration via `custom-payload-file` in Dalfox Server Mode 0.3%
  • CVE-2026-45087 Critical 10.0 Dalfox: Unauthenticated Remote Code Execution via `found-action` in Dalfox Server Mode 8.7%
  • CVE-2026-45089 High 8.2 Dalfox: Unauthenticated Arbitrary File Create/Append via `output` Option in Dalfox Server Mode 0.2%
  • CVE-2026-45090 High 7.5 Dalfox: Unauthenticated Remote DoS via Closed-Channel Write in `ParameterAnalysis` (server mode) 0.3%