Log in Start free

thinkst

Products

ProductCVEsExploitedLatest
canarytokens6–Feb 27, 2026
opencanary1–Oct 14, 2024

Exploited and recent CVEs

  • CVE-2026-28355 Low 1.3 "PWA" Canarytoken Vulnerable to Stored Self Cross-Site Scripting 0.4%
  • CVE-2024-48911 Medium 5.8 OpenCanary Executes Commands From Potentially Writable Config File 0.2%
  • CVE-2024-41664 Medium 5.4 Blind SSRF via Canarytoken Webhook 0.4%
  • CVE-2024-41663 Low 3.5 Canarytoken "Cloned Website" Vulnerable to Stored Cross-Site Scripting 0.3%
  • CVE-2024-28111 Medium 6.5 CSV Injection in exported history CSV files 0.6%
  • CVE-2023-22475 Medium 6.3 Cross-Site Scripting in Canarytoken history 0.6%
  • CVE-2022-31113 Medium 6.3 Cross-Site Scripting in Canarytoken history 0.6%