EUVD-2014-5431

Malware in sbrugna...

SongPop - Customized SSL, Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application SongPop published at the 'play' market has multiple vulnerabilities...

SongPop 2 - Music Quiz - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application SongPop 2 - Music Quiz published at the 'play' market has multiple vulnerabilities...

CVE-2014-5544

The SongPop aka air.com.freshplanet.games.WaM application 1.21.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The SongPop aka air.com.freshplanet.games.WaM application 1.21.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5544

The SongPop aka air.com.freshplanet.games.WaM application 1.21.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5544

CVE-2014-5544 affects the SongPop Android app (package air.com.freshplanet.games.WaM) version 1.21.2. The vulnerability is that the app does not verify X.509 certificates from SSL servers, enabling man‑in‑the‑middle attackers to spoof servers and obtain sensitive information via a crafted certifi...

CVE-2014-5544: Undefined Security Weakness

The SongPop aka air.com.freshplanet.games.WaM application 1.21.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...