https://vulnogram.org/ Most recent CVEs assigned by Thinkst Applied Research (thinkstappliedresearch). https://vulnogram.org/seaview/icons/thinkstappliedresearch.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:07 GMT https://vulnogram.org/CVE-2026-85219 https://vulnogram.org/CVE-2026-85219 Denial-of-Service in Redis module in Thinkst Canary's OpenCanary 0.9.9 allows an unauthenticated remote attacker cause unconstrained memory usage. Low Network Exploitable Mon, 21 Sep 2026 19:39:43 GMT https://vulnogram.org/CVE-2026-85220 https://vulnogram.org/CVE-2026-85220 A vulnerability in the Thinkst Canary honeypot Redis service allows an unauthenticated remote attacker to execute a Denial-of-Service attack against the honeypot. The vulnerability is accessible when the Redis service is enabled only. The Canary is N… Low Network Exploitable Mon, 21 Sep 2026 13:13:53 GMT https://vulnogram.org/CVE-2026-16551 https://vulnogram.org/CVE-2026-16551 Denial-of-Service in Thinkst Applied Research OpenCanary (MongoDB module) allows Excessive Allocation. This issue affects OpenCanary 0.9.8 only. Medium Network Exploitable Wed, 22 Jul 2026 11:22:41 GMT https://vulnogram.org/CVE-2026-13140 https://vulnogram.org/CVE-2026-13140 Stored Cross-Site Scripting in the exposed AWS API key store of Thinkst Applied Research Canarytokens. Anonymous exploitation requires knowledge of a random identifier. This issue affects Canarytokens: from Docker tag sha-4116b92cb before sha-f5aa5c4… Low Wed, 24 Jun 2026 11:12:17 GMT https://vulnogram.org/CVE-2026-12888 https://vulnogram.org/CVE-2026-12888 An HTML injection vulnerability exists in the Google Chat webhook notification sent by Thinkst Applied Research Canarytokens, enabling Interface Manipulation in Google Chat. An attacker can insert limited HTML content including links. This issue affe… Low Network Exploitable Mon, 22 Jun 2026 13:05:53 GMT https://vulnogram.org/CVE-2026-11859 https://vulnogram.org/CVE-2026-11859 An HTML injection vulnerability in the "fetch links" email sent by Thinkst Applied Research Canarytokens, enabling Interface Manipulation, Cross-Site Scripting (XSS) in emails clients that render HTML emails. This issue affects Canarytokens: from Doc… Low Network Exploitable Wed, 10 Jun 2026 11:35:14 GMT https://vulnogram.org/CVE-2026-10729 https://vulnogram.org/CVE-2026-10729 An HTML injection vulnerability in the notification email for "Slow Redirect" and "Cloned Website" Canarytokens exists in Thinkst Applied Research Canarytokens, enabling Interface Manipulation, Cross-Site Scripting (XSS) in emails clients that render… Low Network Exploitable Wed, 03 Jun 2026 13:02:15 GMT