CVE-2014-7786

The English Football Magazine aka com.magzter.englishfootball application 3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7744

The Musulmanin.com aka com.wSalyafiyailimurdjiya application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7779

The Kuran'in Bilimsel Mucizeleri aka com.wKurannBilimselMucizeleri application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Spotify Hacked, Urges Android Users to Upgrade app and Change Password

Today, the popular Music streaming service Spotify said the company has suffered a Data breach and warned users of its Android app to upgrade it in the wake of a potential data breach in their servers. Spotify is a commercial music streaming service launched in October 2008 by Swedish start-up...

Android Outlook App Could Expose Emails, Attachments

There are two issues with the way Microsoft’s Outlook application encrypts content on older versions of Android that could expose users’ emails and email attachments. Paolo Soto, a researcher with the security firm Include Security, said his team initially dug up the vulnerabilities in November...

iThoughtsHD Map名跨站脚本漏洞

Bugtraq ID:66431 CVE ID:CVE-2014-1826 iThoughtsHD是一款针对iPad设计的超实用的思维导图软件。 iPAD设备上的iThoughtsHD app 4.19存在跨站脚本漏洞，当使用WiFi传输功能时，允许远程攻击者利用漏洞通过特制的map名注入任意WEB脚本或HTML。当恶意数据被查看时，可获取敏感信息或劫持用户会话。 0 iThoughtsHD app 4.19 for iOS 目前没有详细解决方案提供： http://www.ithoughts.co.uk/iThoughtsHD/Welcome.html?...

Banana Dance CMS and Wiki - SQL Injection

Banana Dance CMS and Wiki - SQL Injection +-----------------------+ | Banana Dance CMS+Wiki | +-----------------------+ Vulnerable Web-App : Banana Dance CMS+Wiki Vulnerability : SQLi Author : Aodrulez. Email : [email protected] Google-Dork : : Guess it. Tested on : Ubuntu 10.04 Web-App :...