MAL-2025-40777 Malicious code in zebra-leopard-pkm297-project (npm)

The package zebra-leopard-pkm297-project was found to contain malicious code...

MAL-2025-40650 Malicious code in yucca-zebra-rts346-project (npm)

The package yucca-zebra-rts346-project was found to contain malicious code...

MAL-2025-40792 Malicious code in zebra-xerox-was996-project (npm)

The package zebra-xerox-was996-project was found to contain malicious code...

MAL-2025-38495 Malicious code in vista-zebra-pzr214-project (npm)

The package vista-zebra-pzr214-project was found to contain malicious code...

MAL-2025-40787 Malicious code in zebra-quill-gkk089-project (npm)

The package zebra-quill-gkk089-project was found to contain malicious code...

Malicious code in zebra-hedgehog-hkk369-project (npm)

The package zebra-hedgehog-hkk369-project was found to contain malicious code...

CVE-2024-3125

A vulnerability classified as problematic was found in Zebra ZTC GK420d 1.0. This vulnerability affects unknown code of the file /settings of the component Alert Setup Page. The manipulation of the argument Address leads to cross site scripting. The attack can be initiated remotely. The exploit h...

CVE-2022-36443

An issue was discovered in Zebra Enterprise Home Screen 4.1.19. The device allows the administrator to lock some communication channels wireless and SD card but it is still possible to use a physical connection Ethernet cable without restriction...

CVE-2022-36441

An issue was discovered in Zebra Enterprise Home Screen 4.1.19. The Gboard used by different applications can be used to launch and use several other applications that are restricted by the admin...

CVE-2022-36442

An issue was discovered in Zebra Enterprise Home Screen 4.1.19. By using the embedded Google Chrome application, it is possible to install an unauthorized application via a downloaded APK...

CVE-2021-20133

Quagga Services on D-Link DIR-2640 less than or equal to version 1.11B02 are affected by an absolute path traversal vulnerability that allows a remote, authenticated attacker to set the "message of the day" banner to any file on the system, allowing them to read all or some of the contents of tho...

CVE-2021-32089

An issue was discovered on Zebra formerly Motorola Solutions Fixed RFID Reader FX9500 devices. An unauthenticated attacker can upload arbitrary files to the filesystem that can then be accessed through the web interface. This can lead to information disclosure and code execution. NOTE: This...

CVE-2021-21818

A hard-coded password vulnerability exists in the Zebra IP Routing Manager functionality of D-LINK DIR-3040 1.13B03. A specially crafted network request can lead to a denial of service. An attacker can send a sequence of requests to trigger this vulnerability...

CVE-2019-10960

Zebra Industrial Printers All Versions, Zebra printers are shipped with unrestricted end-user access to front panel options. If the option to use a passcode to limit the functionality of the front panel is applied, specially crafted packets could be sent over the same network to a port on the...

zebra-online.com Cross Site Scripting vulnerability OBB-4041368

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Linux Distros Unpatched Vulnerability : CVE-2016-1245

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - It was discovered that the zebra daemon in Quagga before 1.0.20161017 suffered from a stack-based buffer overflow when processing IPv6 Neighbor Discovery...

WordPress my zebra theme <= 2.0.6 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by justakazh Patchstack Alliance in WordPress Theme my zebra versions = 2.0.6...

MAL-2024-3985 Malicious code in @fdfe/zebra-sequelize-client (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @fdfe/zebra-sequelize-client (npm)

--- -= Per source details. Do not edit below this line.=-...

Oracle Linux 8 : frr (ELSA-2024-2981)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-2981 advisory. 7.5.1-22.0.1 - Fix POSTIN scriptlet Orabug: 34712485 - Resolves: RHEL-15916 - Flowspec overflow in bgpd/bgpflowspec.c - Resolves: RHEL-15919 - Out of...