Taylor Swift's Twitter and Instagram Accounts Hacked

The very popular Pop star Taylor Swift became the latest celebrity to have their social media accounts hacked on Tuesday. The 25-year-old "Shake It Off" singer, who has the fourth-most popular Twitter account with 51.4 million followers, appeared to be asking her millions of followers to follow...

Instagram Patches flaw that Makes Private Photos Visible

Your Instagram is not as Private as You Think. Millions of private Instagram photos may have been exposed publicly on the web until the company patched a privacy hole this weekend. Instagram team was unaware of a security vulnerability from long time which allowed anyone with access to an image’s...

CVE-2014-6834

The Instaroid - Instagram Viewer aka net.muik.instaroid application 1.2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6834

The Instaroid - Instagram Viewer aka net.muik.instaroid application 1.2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6834

The CVE-2014-6834 entry concerns Instaroid - Instagram Viewer (net.muik.instaroid) for Android (version 1.2.1). Affected component: SSL/TLS certificate validation in the app; root cause is that X.509 certificates from SSL servers are not verified, which can allow MITM attackers to spoof servers a...

The relevant departments repair. Instagram can be accessed vulnerability-vulnerability warning-the black bar safety net

Today the Facebook-owned photo-sharing service Instagram be blocked in social networking sites such as Sina Weibo, Instagram search is also shielded. As early as this year 7 month, Instagram application from the main domestic third-party Android stores disappear. It is not possible to determine...

CVE-2014-6690

Affected software: InstaMessage – Instagram Chat (aka com.futurebits.instamessage.free), version 1.6.2 for Android. Root cause: the app does not verify X.509 certificates from SSL servers. Impact: MITM attackers could spoof legitimate servers and obtain sensitive information via a crafted certifi...

Design/Logic Flaw

The LikeHero Get Instagram Likes aka com.fraoula.likehero application 1.0.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6007

The CVE-2014-6007 entry affects the Android app LikeHero Get Instagram Likes (com.fraoula.likehero) version 1.0.7. The root cause is the app’s failure to verify X.509 certificates from SSL servers, which allows a man-in-the-middle to spoof servers and obtain sensitive information via a crafted ce...

CVE-2014-6007

The LikeHero Get Instagram Likes aka com.fraoula.likehero application 1.0.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Vulnerabilities in Android Apps That Allow Intercept of Messages, Photos Outlined

Researchers from the University of New Haven have taken to Youtube this week to publicize vulnerabilities in a dozen Android apps, including Instagram, Vine and OKCupid. Researchers at the University of New Haven’s Cyber Forensics Research and Education Group UNHcFREG have chosen to disclose the...

CVE-2014-5622

The Follow Mania for Instagram aka com.followmania application 1.2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Phonegram - Instagram Download aka com.pinssible.padgram application 1.9.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Follow Mania for Instagram aka com.followmania application 1.2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Like4Like: Get Instagram Likes aka com.bepop.bepop application 2.1.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5622

The CVE-2014-5622 entry concerns the Android app Follow Mania for Instagram (com.followmania) version 1.2.1. The affected component is the SSL certificate validation when establishing TLS connections; the app does not verify X.509 certificates from SSL servers. This behavior enables man-in-the-mi...

CVE-2014-5643

The CVE-2014-5643 entry concerns the Instachat – Instagram Messenger Android app (com.instachat.android), version 1.6.2. Root cause: the app does not verify X.509 certificates from SSL servers. Impact: enables man‑in‑the‑middle attackers to spoof servers and access sensitive information via a cra...

CVE-2014-5675

The CVE-2014-5675 entry concerns the Phonegram - Instagram Download (com.pinssible.padgram) Android app, version 1.9.5, which does not verify X.509 certificates from SSL servers. Root cause: lack of SSL certificate validation. Impact: enables man-in-the-middle attackers to spoof servers and acces...

CVE-2014-5679

The CVE ties to the Android app PopU 2: Get Likes on Instagram (package: com.popuapp.popu) version 1.7.5 . The vulnerability is that the app does not verify X.509 certificates from SSL servers , enabling potential man-in-the-middle attackers to spoof servers and access sensitive information via a...

CVE-2014-5675

The Phonegram - Instagram Download aka com.pinssible.padgram application 1.9.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...