Sweet Candy Store! Food Maker - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Sweet Candy Store! Food Maker published at the 'play' market has multiple vulnerabilities...

Candy Sweet - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Candy Sweet published at the 'play' market has multiple vulnerabilities...

Candy Party: Coin Carnival - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Candy Party: Coin Carnival published at the 'play' market has multiple vulnerabilities...

Happy Farm:Candy Day - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Happy Farm:Candy Day published at the 'play' market has multiple vulnerabilities...

Candy Frenzy 2 - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Candy Frenzy 2 published at the 'play' market has multiple vulnerabilities...

Candy Blast Mania - Corrupted files, Dynamic Code Loading, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Candy Blast Mania published at the 'play' market has multiple vulnerabilities...

Candy Crush Android Theme - Customized SSL, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Candy Crush Android Theme published at the 'play' market has multiple vulnerabilities...

Candy Camera - Customized SSL, Dangerous filesystem permissions, GPL license vulnerabilities

HackApp vulnerability scanner discovered that application Candy Camera published at the 'play' market has multiple vulnerabilities...

Candy Camera - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Candy Camera published at the 'play' market has multiple vulnerabilities...

TIPS Candy Crush Saga - Corrupted files, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application TIPS Candy Crush Saga published at the 'play' market has multiple vulnerabilities...

CVE-2014-6696

The Candy Girl Party Makeover aka com.bearhugmedia.androidcandygirlparty application 1.0.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6696

The CVE-2014-6696 entry concerns the Android app Candy Girl Party Makeover (com.bearhugmedia.android_candygirlparty) version 1.0.0.0, which does not verify X.509 certificates when establishing TLS connections. Root cause: missing server certificate validation, enabling man-in-the-middle attackers...

CVE-2014-6696: Undefined Security Weakness

The Candy Girl Party Makeover aka com.bearhugmedia.androidcandygirlparty application 1.0.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5858

The Candy Blast aka com.appgame7.candyblast application 1.1.001 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Candy Blast aka com.appgame7.candyblast application 1.1.001 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5858

The Candy Blast aka com.appgame7.candyblast application 1.1.001 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5858

The CVE-2014-5858 entry concerns the Candy Blast (com.appgame7.candyblast) Android app version 1.1.001, which fails to verify X.509 certificates from SSL servers. This weakens TLS and can permit a man-in-the-middle to spoof servers and obtain sensitive information via a crafted certificate. The p...

CVE-2014-5858: Undefined Security Weakness

The Candy Blast aka com.appgame7.candyblast application 1.1.001 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Cotton Candy USB with Dual-Core Computer can turns Any Screen Into an Android Station

Cotton Candy USB with Dual-Core Computer can turns Any Screen Into an Android Station Norwegian company FXI Technologies has been showing a USB stick-sized portable computer prototype, featuring with a dual-core 1.2-GHz CPU, 802.11n Wi-Fi, Bluetooth, HDMI-out and a microSD card slot for memory...

Cotton Candy USB with Dual-Core Computer can turns Any Screen Into an Android Station

Cotton Candy USB with Dual-Core Computer can turns Any Screen Into an Android Station Norwegian company FXI Technologies has been showing a USB stick-sized portable computer prototype, featuring with a dual-core 1.2-GHz CPU, 802.11n Wi-Fi, Bluetooth, HDMI-out and a microSD card slot for memory...