A week in security (February 1 – February 7)

Last week on Malwarebytes Labs, we dug into a load of security events. We first peered into how Fonix ransomware was giving up the ghost, swearing off a life of crime and even apologizing for past actions. We looked at a credit card skimmer that found opportunity in the latest Magento 1 hacking...

Design/Logic Flaw

Due to unencrypted and unauthenticated data communication, the wireless barcode scanner Inateck BCST-60 is prone to keystroke injection attacks. Thus, an attacker is able to send arbitrary keystrokes to a victim's computer system, e.g., to install malware when the target system is unattended. In...

CVE-2019-12503

CVE-2019-12503 affects the Inateck BCST-60 wireless barcode scanner. The issue is unencrypted and unauthenticated data communication allowing keystroke injection, enabling an attacker to send arbitrary keystrokes to a victim’s computer and potentially install malware when the target system uses a...

CVE-2019-12503

Due to unencrypted and unauthenticated data communication, the wireless barcode scanner Inateck BCST-60 is prone to keystroke injection attacks. Thus, an attacker is able to send arbitrary keystrokes to a victim's computer system, e.g., to install malware when the target system is unattended. In...

Inateck BCST-60 Barcode Scanner Keystroke Injection Vulnerability

The Inateck BCST-60 is a barcode scanner that can be used wirelessly using 2.4 GHz radio communication or wired via USB. The Inateck BCST-60 Barcode Scanner suffers from a keystroke injection vulnerability that can be exploited by an attacker to send packets of data to a target system's USB...

CVE-2019-13526

Datalogic AV7000 Linear barcode scanner all versions prior to 4.6.0.0 is vulnerable to authentication bypass, which may allow an attacker to remotely execute arbitrary code...

CVE-2019-13526

Datalogic AV7000 Linear barcode scanner all versions prior to 4.6.0.0 is vulnerable to authentication bypass, which may allow an attacker to remotely execute arbitrary code...

CVE-2019-13526

CVE-2019-13526 affects Datalogic AV7000 Linear Barcode Scanner (all versions prior to 4.6.0.0). The vulnerability is an authentication bypass (CWE-288) that could allow a remote attacker to execute arbitrary code. Public documents confirm remote exploitation with CVSS v3 base score 8.8 (high impa...

Datalogic AV7000 Authentication Bypass Vulnerability

The AV7000 is a linear barcode scanner from Datalogic. An authentication bypass vulnerability exists in Datalogic AV7000 versions prior to 4.6.0.0. A remote attacker could exploit this vulnerability to execute arbitrary code using an alternate path or channel...

Datalogic AV7000 Linear Barcode Scanner

1. EXECUTIVE SUMMARY CVSS v3 8.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Datalogic Equipment: AV7000 Linear Barcode Scanner Vulnerability: Authentication Bypass Using an Alternate Path or Channel 2. RISK EVALUATION Successful exploitation of this vulnerability could...

Balluff BVS001A Barcode Scanner Detection

Binary data 762563.prm...

Balluff BVS001C Barcode Scanner Detection

Binary data 762567.prm...

Balluff BVS0019 Barcode Scanner Detection

Binary data 762560.prm...

Balluff BVS000T Barcode Scanner Detection

Binary data 762562.prm...

Balluff BVS000Y Barcode Scanner Detection

Binary data 762566.prm...

Balluff BVS001R Barcode Scanner Detection

Binary data 762565.prm...

mobile-barcode-scanner.com XSS vulnerability

Open Bug Bounty ID: OBB-533648 Description| Value ---|--- Affected Website:| mobile-barcode-scanner.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

QR BARCODE SCANNER - Dynamic Code Loading, External URLs, Possible privilege escalation vulnerabilities

HackApp vulnerability scanner discovered that application QR BARCODE SCANNER published at the 'play' market has multiple vulnerabilities...

QR Code Scan & Barcode Scanner - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application QR Code Scan & Barcode Scanner published at the 'play' market has multiple vulnerabilities...

QR & Barcode Scanner - Dynamic Code Loading, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application QR & Barcode Scanner published at the 'play' market has multiple vulnerabilities...