CVE-2026-85219

Denial-of-Service in Redis module in Thinkst Canary's OpenCanary 0.9.9 allows an unauthenticated remote attacker cause unconstrained memory usage...

CVE-2026-85220

A vulnerability in the Thinkst Canary honeypot Redis service allows an unauthenticated remote attacker to execute a Denial-of-Service attack against the honeypot. The vulnerability is accessible when the Redis service is enabled only. The Canary is NOT affected if the Redis service is disabled...

CVE-2026-85220

CVE-2026-85220 is a Denial-of-Service vulnerability in the Redis service of the Thinkst Canary honeypot. An unauthenticated remote attacker can trigger a DoS when the Redis service is enabled ; the Canary is not affected if the service is disabled. The CVSS 3.1 score is 3.7 (LOW) , reflecting hig...

CVE-2026-85220 Denial-of-Service in the Thinkst Canary Redis service

A vulnerability in the Thinkst Canary honeypot Redis service allows an unauthenticated remote attacker to execute a Denial-of-Service attack against the honeypot. The vulnerability is accessible when the Redis service is enabled only. The Canary is NOT affected if the Redis service is disabled...

EUVD-2026-83910

A vulnerability in the Thinkst Canary honeypot Redis service allows an unauthenticated remote attacker to execute a Denial-of-Service attack against the honeypot. The vulnerability is accessible when the Redis service is enabled only. The Canary is NOT affected if the Redis service is disabled...

opencanary

OpenCanary（Thinkst Canary 开发） OpenCanary 是一个多协议网络蜜罐。它的主要用途是捕捉那些已经突破非公开网络的黑客。它的资源要求极低，并且可以调整、修改和扩展。 概述 OpenCanary 以守护进程（daemon）方式运行，并实现了多种常见网络协议。当攻击者突破网络并与蜜罐交互时，OpenCanary 会通过多种机制向你发送告警。 OpenCanary 使用 Python 实现，因此核心蜜罐是跨平台的；不过，某些功能需要特定的操作系统。在 Linux 上运行会提供最多的选项。它的资源要求极低；例如，可以轻松部署在树莓派或资源极少的虚拟机上。 本...

canarytokens-docker

Dockerized Canarytokens by Thinkst Applied Research Overview Canarytokens help track activity and actions on your network. If you have any issues please check out our FAQ over here, or create an issue and we'll try to get back to you as soon as possible. Table of Contents Code of Conduct...

canarytokens-docker

Dockerized Canarytokens 由 Thinkst Applied Research 出品 概述 Canarytokens 可帮助您跟踪网络上的活动和操作。 如果您遇到任何问题，请查看我们的常见问题解答，或创建一个 issue，我们会尽快回复您。 目录 行为准则 前提条件 迁移到 v3 设置（在 Ubuntu 中） 持久化数据 如何启用 HTTPS 为您的 Canarytokens 站点启用基本身份验证 有哪些新功能？ 常见问题 贡献 行为准则 本项目及所有参与者均受行为准则的约束。参与即表示您同意遵守该准则。请将不当行为报告至 [email protected]...

CVE-2026-13140

Stored Cross-Site Scripting in the exposed AWS API key store of Thinkst Applied Research Canarytokens. Anonymous exploitation requires knowledge of a random identifier. This issue affects Canarytokens: from Docker tag sha-4116b92cb before sha-f5aa5c4e, from Git commit 4116b92cb before f5aa5c4e...

EUVD-2026-38736

Stored Cross-Site Scripting in the exposed AWS API key store of Thinkst Applied Research Canarytokens. Anonymous exploitation requires knowledge of a random identifier. This issue affects Canarytokens: from Docker tag sha-4116b92cb before sha-f5aa5c4e, from Git commit 4116b92cb before f5aa5c4e...

CVE-2026-12888

An HTML injection vulnerability exists in the Google Chat webhook notification sent by Thinkst Applied Research Canarytokens, enabling Interface Manipulation in Google Chat. An attacker can insert limited HTML content including links. This issue affects Canarytokens: from Docker tag sha-4aef1db90...

EUVD-2026-38240

An HTML injection vulnerability exists in the Google Chat webhook notification sent by Thinkst Applied Research Canarytokens, enabling Interface Manipulation in Google Chat. An attacker can insert limited HTML content including links. This issue affects Canarytokens: from Docker tag sha-4aef1db90...

CVE-2026-11859

An HTML injection vulnerability in the "fetch links" email sent by Thinkst Applied Research Canarytokens, enabling Interface Manipulation, Cross-Site Scripting XSS in emails clients that render HTML emails. This issue affects Canarytokens: from Docker tag sha-c0f3cf142 before sha-08c3f93d, from G...

CVE-2026-11859

An HTML injection vulnerability in the "fetch links" email sent by Thinkst Applied Research Canarytokens, enabling Interface Manipulation, Cross-Site Scripting XSS in emails clients that render HTML emails. This issue affects Canarytokens: from Docker tag sha-c0f3cf142 before sha-08c3f93d, from G...

CVE-2026-10729 HTML injection in the notification email for "Slow Redirect" and "Cloned Website" Canarytokens

An HTML injection vulnerability in the notification email for "Slow Redirect" and "Cloned Website" Canarytokens exists in Thinkst Applied Research Canarytokens, enabling Interface Manipulation, Cross-Site Scripting XSS in emails clients that render HTML emails. This issue affects Canarytokens: fr...

CVE-2026-10729

The CVE-2026-10729 entry covers an HTML injection vulnerability in Thinkst Applied Research Canarytokens specifically in the notification email delivery. Affected component: Canarytokens notification emails that render HTML. Root cause described: HTML injection can enable Interface Manipulation a...

Canarytokens 跨站脚本漏洞

Canarytokens is a web activity tracking system open source by Thinkst Applied Research. Previous versions of Canarytokens had a cross-site scripting vulnerability. This vulnerability stemmed from improper handling of the title field in PWA Canarytoken, which could lead to cross-site scripting...

PT-2025-53683

I was credited for discovering and responsibly disclosing CVE-2025-67797 TC-2025-01 affecting Thinkst Canary. The issue is a relative path traversal vulnerability in the Canary HTTP Web Server specific webskins only https://t.co/Q7p1Er1eJI @thinkst CVE CyberSecurity 🇹🇿 https://t.co/TXxlliE7A2...

Canarytokens 安全漏洞

Canarytokens is an open source web activity tracking system from Thinkst Applied Research. A security vulnerability exists in Canarytokens that stems from a server-side request forgery vulnerability that was discovered in the Webhook alert feature...

Thinkst Canarytokens Security Vulnerability

Thinkst Canarytokens is a web activity tracking system. A security vulnerability exists in previous versions of Thinkst Canarytokens sha-c595a1f8 that stems from vulnerability to CSV injection attacks...