Skip to content
BackEsc
Sign in

Zebra VDP · in scope

Wildcard domains

26 assets in scope

Out of date: the sync last ran 3 hours ago. Newer CVEs and scores may be missing from the map.

Every dot is an asset the program lists in scope. The first 20 are named here; the program's own page has the full scope.

Open Zebra VDP on HackerOne

Every one of the 26 is a mark on the map. Named now: 1 to 20, as listed first.

  1. *.antuit.aiWildcard domains
  2. *.bankofamerica.reflexisinc.comWildcard domains
  3. *.cortexica.comWildcard domains
  4. *.cto-si.zebra.comWildcard domains
  5. *.cvsltc.reflexisinc.comWildcard domains
  6. *.dnacloud.zebra.comWildcard domains
  7. *.elotouch.comWildcard domains
  8. *.hartsystems.comWildcard domains
  9. *.jpmc.reflexisinc.comWildcard domains
  10. *.knlbobs.reflexisinc.com/myworkWildcard domains
  11. *.mcduk.reflexisinc.co.ukWildcard domains
  12. *.pp.zebra.comWildcard domains
  13. *.pttpro.zebra.comWildcard domains
  14. *.reflexisinc.comWildcard domains
  15. *.toolsportal.zebra.comWildcard domains
  16. *.viq.zebra.comWildcard domains
  17. *.zams.zebra.comWildcard domains
  18. *.zebra.comWildcard domains
  19. *.zebra.com/mobicontrolWildcard domains
  20. *.zebra.engineeringWildcard domains

paid a bounty

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

CyberSIXTSignal over noise
Updated AboutDevelopersSign in