Word Search Free - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Word Search Free published at the 'play' market has multiple vulnerabilities...

Word Search Free - Dynamic Code Loading, External URLs, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Word Search Free published at the 'play' market has multiple vulnerabilities...

Design/Logic Flaw

The Word Search Free aka air.wordSearchFree application 4.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5561

CVE-2014-5561 affects the Word Search Free (air.wordSearchFree) Android app v4.9, where SSL does not verify X.509 certificates, enabling MITM attackers to spoof servers and obtain sensitive information via a crafted certificate. The available connected sources reiterate this certificate validatio...

CVE-2014-5561

The Word Search Free aka air.wordSearchFree application 4.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5561: Undefined Security Weakness

The Word Search Free aka air.wordSearchFree application 4.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...