Scanslocal/vulnerable-app
Scan #87y4pn
framework: node · target http://127.0.0.1:4600
Done
100%Bootstrap
Threat model
Static scan
Exploit synthesis
Report
Done
11
verified
14
candidates
0
false-positives dropped
Verified findings
critical9.8✓ verifiedhigh7.5✓ verifiedhigh7.5✓ verifiedhigh7.5✓ verifiedcritical9.8✓ verifiedcritical10✓ verifiedcritical9.9✓ verifiedhigh7.5✓ verifiedmedium6.1✓ verifiedmedium5.3✓ verifiedmedium5.3✓ verified
Unauthenticated Remote Command Injection in /api/ping host parameter
injection-cmd · server.js:31
Unauthenticated IDOR on /api/notes exposes private notes (PII, bank PIN)
auth-bypass · server.js:48
Unauthenticated IDOR on /api/notes discloses other users' private notes
idor · server.js:48
Unauthenticated Path Traversal in /api/file Allows Arbitrary File Read
path-traversal · server.js:38
Unauthenticated Remote Command Execution via /api/ping host parameter
auth-bypass · server.js:29
Hardcoded production API key (sk_live_*) committed in server.js
secrets-in-source · server.js:11
Unauthenticated SSRF via /api/fetch enables internal network access through the server
auth-bypass · server.js:63
Unauthenticated arbitrary file read via /api/file path traversal
auth-bypass · server.js:38
Reflected XSS in /search via unescaped 'q' query parameter
xss · server.js:56
Filesystem error messages reflected to clients disclose absolute server paths
info-leak · server.js:40
SSRF error disclosure enables internal network and port enumeration via /api/fetch
info-leak · server.js:72