CVE-2020-8792

The OKLOK 3.1.1 mobile companion app for Fingerprint Bluetooth Padlock FB50 2.3 has an information-exposure issue. In the mobile app, an attempt to add an already-bound lock by its barcode reveals the email address of the account to which the lock is bound, as well as the name of the lock. Valid...

CVE-2020-8792: Use of Insufficiently Random Values

The OKLOK 3.1.1 mobile companion app for Fingerprint Bluetooth Padlock FB50 2.3 has an information-exposure issue. In the mobile app, an attempt to add an already-bound lock by its barcode reveals the email address of the account to which the lock is bound, as well as the name of the lock. Valid...

Malicious Package

Overview jmcnevin-rghost-barcode is a malicious package. Affected versions of this package were found to be a Malicious Package, as it utilised typosquatting to run Malicious 3rd party scripts. It replaced genuine packages using an and replaced it with - and vice versa Remediation Avoid using...

CVE-2020-9385

A NULL Pointer Dereference exists in libzint in Zint 2.7.1 because multiple + characters are mishandled in addon in upcean.c, when called from eanx in upcean.c during EAN barcode generation...

CVE-2020-9385

A NULL Pointer Dereference exists in libzint in Zint 2.7.1 because multiple + characters are mishandled in addon in upcean.c, when called from eanx in upcean.c during EAN barcode generation...

Null pointer dereference

A NULL Pointer Dereference exists in libzint in Zint 2.7.1 because multiple + characters are mishandled in addon in upcean.c, when called from eanx in upcean.c during EAN barcode generation...

CVE-2020-9385

CVE-2020-9385 affects libzint (Zint) up to version 2.7.1, where a NULL pointer dereference occurs due to mishandling of multiple + characters in add_on in upcean.c when invoked from eanx in upcean.c during EAN barcode generation. Multiple connected sources corroborate this detail, establishing th...

CVE-2020-9385

A NULL Pointer Dereference exists in libzint in Zint 2.7.1 because multiple + characters are mishandled in addon in upcean.c, when called from eanx in upcean.c during EAN barcode generation...

CVE-2020-9385

A NULL Pointer Dereference exists in libzint in Zint 2.7.1 because multiple + characters are mishandled in addon in upcean.c, when called from eanx in upcean.c during EAN barcode generation...

CVE-2020-9385: NULL Pointer Dereference

A NULL Pointer Dereference exists in libzint in Zint 2.7.1 because multiple + characters are mishandled in addon in upcean.c, when called from eanx in upcean.c during EAN barcode generation...

Encoding Stolen Credit Card Data on Barcodes

Crooks are constantly dreaming up new ways to use and conceal stolen credit card data. According to the U.S. Secret Service, the latest scheme involves stolen card information embedded in barcodes affixed to phony money network rewards cards. The scammers then pay for merchandise by instructing a...

Design/Logic Flaw

Due to unencrypted and unauthenticated data communication, the wireless barcode scanner Inateck BCST-60 is prone to keystroke injection attacks. Thus, an attacker is able to send arbitrary keystrokes to a victim's computer system, e.g., to install malware when the target system is unattended. In...

CVE-2019-12503

CVE-2019-12503 affects the Inateck BCST-60 wireless barcode scanner. The issue is unencrypted and unauthenticated data communication allowing keystroke injection, enabling an attacker to send arbitrary keystrokes to a victim’s computer and potentially install malware when the target system uses a...

CVE-2019-12503

Due to unencrypted and unauthenticated data communication, the wireless barcode scanner Inateck BCST-60 is prone to keystroke injection attacks. Thus, an attacker is able to send arbitrary keystrokes to a victim's computer system, e.g., to install malware when the target system is unattended. In...

Inateck BCST-60 Barcode Scanner Keystroke Injection Vulnerability

The Inateck BCST-60 is a barcode scanner that can be used wirelessly using 2.4 GHz radio communication or wired via USB. The Inateck BCST-60 Barcode Scanner suffers from a keystroke injection vulnerability that can be exploited by an attacker to send packets of data to a target system's USB...

CVE-2019-13526

Datalogic AV7000 Linear barcode scanner all versions prior to 4.6.0.0 is vulnerable to authentication bypass, which may allow an attacker to remotely execute arbitrary code...

Authentication flaw

Datalogic AV7000 Linear barcode scanner all versions prior to 4.6.0.0 is vulnerable to authentication bypass, which may allow an attacker to remotely execute arbitrary code...

CVE-2019-13526

Datalogic AV7000 Linear barcode scanner all versions prior to 4.6.0.0 is vulnerable to authentication bypass, which may allow an attacker to remotely execute arbitrary code...

CVE-2019-13526

CVE-2019-13526 affects Datalogic AV7000 Linear Barcode Scanner (all versions prior to 4.6.0.0). The vulnerability is an authentication bypass (CWE-288) that could allow a remote attacker to execute arbitrary code. Public documents confirm remote exploitation with CVSS v3 base score 8.8 (high impa...

CVE-2019-13526: Authentication Bypass Using an Alternate Path or Channel

Datalogic AV7000 Linear barcode scanner all versions prior to 4.6.0.0 is vulnerable to authentication bypass, which may allow an attacker to remotely execute arbitrary code...