Skip to main content

Thinkst

5 CVEs vendor

Monthly

CVE-2024-48911 Oct 14, 21:15 PyPI MEDIUM PATCH This Month

OpenCanary, a multi-protocol network honeypot, directly executed commands taken from its config file. Rated medium severity (CVSS 5.8), this vulnerability is low attack complexity. This Incorrect Authorization vulnerability could allow attackers to bypass authorization checks to access restricted resources.

Authentication Bypass Opencanary Thinkst
NVD GitHub
CVSS 4.0
5.8
EPSS
0.2%
CVE-2024-28111 Mar 06, 22:15 MEDIUM PATCH This Month

Canarytokens helps track activity and actions on a network. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

RCE Microsoft Canarytokens Thinkst
NVD GitHub
CVSS 3.1
6.5
EPSS
0.6%
CVE-2023-22475 Jan 06, 15:15 MEDIUM PATCH This Month

Canarytokens is an open source tool which helps track activity and actions on your network. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

XSS Docker Canarytokens Thinkst
NVD GitHub
CVSS 3.1
6.1
EPSS
0.5%
CVE-2022-31113 Jul 01, 17:15 MEDIUM PATCH This Month

Canarytokens is an open source tool which helps track activity and actions on your network. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

XSS Canarytokens Thinkst
NVD GitHub
CVSS 3.1
6.1
EPSS
0.5%
CVE-2019-9768 Mar 14, 09:29 HIGH POC THREAT This Week

Thinkst Canarytokens through commit hash 4e89ee0 (2019-03-01) relies on limited variation in size, metadata, and timestamp, which makes it easier for attackers to estimate whether a Word document. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Privilege Escalation Canarytokens Thinkst
NVD GitHub Exploit-DB
CVSS 3.0
7.5
EPSS
11.7%
EPSS 0% CVSS 5.8
MEDIUM PATCH This Month

OpenCanary, a multi-protocol network honeypot, directly executed commands taken from its config file. Rated medium severity (CVSS 5.8), this vulnerability is low attack complexity. This Incorrect Authorization vulnerability could allow attackers to bypass authorization checks to access restricted resources.

Authentication Bypass Opencanary Thinkst
NVD GitHub
EPSS 1% CVSS 6.5
MEDIUM PATCH This Month

Canarytokens helps track activity and actions on a network. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

RCE Microsoft Canarytokens +1
NVD GitHub
EPSS 1% CVSS 6.1
MEDIUM PATCH This Month

Canarytokens is an open source tool which helps track activity and actions on your network. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

XSS Docker Canarytokens +1
NVD GitHub
EPSS 1% CVSS 6.1
MEDIUM PATCH This Month

Canarytokens is an open source tool which helps track activity and actions on your network. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

XSS Canarytokens Thinkst
NVD GitHub
EPSS 12% CVSS 7.5
HIGH POC THREAT This Week

Thinkst Canarytokens through commit hash 4e89ee0 (2019-03-01) relies on limited variation in size, metadata, and timestamp, which makes it easier for attackers to estimate whether a Word document. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Privilege Escalation Canarytokens Thinkst
NVD GitHub Exploit-DB

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy