NBA All Net - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application NBA All Net published at the 'play' market has multiple vulnerabilities...

NBA General Manager 2016 - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application NBA General Manager 2016 published at the 'play' market has multiple vulnerabilities...

Sports Alerts - NBA edition - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Sports Alerts - NBA edition published at the 'play' market has multiple vulnerabilities...

NBA LIVE Companion - Dynamic Code Loading, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application NBA LIVE Companion published at the 'play' market has multiple vulnerabilities...

marca.com XSS vulnerability

Vulnerable URL: http://www.marca.com/baloncesto/nba/albumalert/XSSPOSED/...

sports.espn.go.com XSS vulnerability

Vulnerable URL: http://sports.espn.go.com/nba/draft2015/insider--alert/xssposed/...

nba.com XSS vulnerability

Vulnerable URL: http://www.nba.com/raptors/video/search/?ls=channav=%3C/script%3Ev0raz%3Csvg/onload=alert/XSSPosed/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 432 Google...

nba.com XSS vulnerability

Vulnerable URL: http://www.nba.com/spurs/video/search/?ls=channav=%3C/script%3Ev0raz%3Csvg/onload=alert/XSSPosed/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 432 Google...

nba.com XSS vulnerability

Vulnerable URL: http://www.nba.com/suns/video/search/?ls=channav=%3C/script%3Ev0raz%3Csvg/onload=alert/XSSPosed/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 432 Google...

nba.com XSS vulnerability

Open Bug Bounty ID: OBB-71670 Description| Value ---|--- Affected Website:| nba.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

nba.com XSS vulnerability

Vulnerable URL: http://www.nba.com/grizzlies/video/search/?ls=channav=%3C/script%3Ev0raz%3Csvg/onload=alert/XSSPosed/%3E Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 12:27 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclose...

nba.com XSS vulnerability

Open Bug Bounty ID: OBB-71664 Description| Value ---|--- Affected Website:| nba.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

nba.com XSS vulnerability

Vulnerable URL: http://www.nba.com/warriors/video/search/?ls=channav=%3C/script%3Ev0raz%3Csvg/onload=alert/XSSPosed/%3E Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 12:27 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

nba.com XSS vulnerability

Open Bug Bounty ID: OBB-71657 Description| Value ---|--- Affected Website:| nba.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2014-6700

The NBA Game Time 2013-2014 aka com.nbadigital.gametimelite application 4.11 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The NBA Game Time 2013-2014 aka com.nbadigital.gametimelite application 4.11 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6700

The NBA Game Time 2013-2014 aka com.nbadigital.gametimelite application 4.11 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6700

The CVE-2014-6700 entry concerns the NBA Game Time 2013-2014 Android app (com.nbadigital.gametimelite) version 4.11. The root cause is failure to verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and access sensitive information via a crafted certif...

PT-2014-7378

Name of the Vulnerable Software and Affected Versions NBA Game Time 2013-2014 application version 4.11 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509 certificates from S...

CVE-2014-6700: Undefined Security Weakness

The NBA Game Time 2013-2014 aka com.nbadigital.gametimelite application 4.11 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...