Free Books - 23,469 Classics - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Free Books - 23,469 Classics published at the 'play' market has multiple vulnerabilities...

Audio Books by Audiobooks - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Audio Books by Audiobooks published at the 'play' market has multiple vulnerabilities...

Audio Books Free - Dynamic Code Loading, External URLs, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Audio Books Free published at the 'play' market has multiple vulnerabilities...

Free books to download & read - Dangerous filesystem permissions, GPL license, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Free books to download & read published at the 'play' market has multiple vulnerabilities...

LibriVox Audio Books Free - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application LibriVox Audio Books Free published at the 'play' market has multiple vulnerabilities...

Wattpad - Free Books & Stories - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Wattpad - Free Books & Stories published at the 'play' market has multiple vulnerabilities...

2014-2015 Professional Reading Round-Up

At an earlier point in my career, I used to read a lot of technical security books. From 2006 to 2012 I published a series of Best Book Bejtlich Read posts. Beginning in 2013 I became much more interested in military-derived strategy and history, dating back to my studies at the Air Force Academy...

Information disclosure

The 100 Books aka com.ireadercity.c20 application 3.0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7493

CVE-2014-7493 applies to The 100 Books (com.ireadercity.c20) Android app v3.0.2, where SSL certificate validation is not performed for X.509 certificates. This allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Root cause: missing SSL c...

CVE-2014-7493: Undefined Security Weakness

The 100 Books aka com.ireadercity.c20 application 3.0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6750

The $0.99 Kindle Books aka com.kindle.books.for99 application 6.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The $0.99 Kindle Books aka com.kindle.books.for99 application 6.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6750

The CVE-2014-6750 entry concerns the Android app “The $0.99 Kindle Books (com.kindle.books.for99)” version 6.0, which does not verify X.509 certificates from SSL servers. This behavior enables man-in-the-middle attackers to spoof servers and access sensitive information via a crafted certificate....

CVE-2014-6750

The $0.99 Kindle Books aka com.kindle.books.for99 application 6.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6686

The Zoho Books - Accounting App aka com.zoho.books application 3.1.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Zoho Books - Accounting App aka com.zoho.books application 3.1.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6686

CVE-2014-6686 affects Zoho Books - Accounting App (com.zoho.books) for Android, version 3.1.9, where the app does not verify X.509 certificates from SSL servers. This permits MITM attackers to spoof servers and obtain sensitive information via a crafted certificate. The connected documents reiter...

CVE-2014-6686

The Zoho Books - Accounting App aka com.zoho.books application 3.1.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6686: Undefined Security Weakness

The Zoho Books - Accounting App aka com.zoho.books application 3.1.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6022

The Versent Books aka com.versentbooks application 1.1.99 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...