2014 Penalty Cup - Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application 2014 Penalty Cup published at the 'play' market has multiple vulnerabilities...

Drop In The Cup - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Drop In The Cup published at the 'play' market has multiple vulnerabilities...

King's Cup - Drinking Game - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application King's Cup - Drinking Game published at the 'play' market has multiple vulnerabilities...

Tic Tac Toe World Cup Brazil - Base64 encoded String, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Tic Tac Toe World Cup Brazil published at the 'play' market has multiple vulnerabilities...

Spengler Cup Davos - External URLs, Native code usage, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application Spengler Cup Davos published at the 'play' market has multiple vulnerabilities...

Coffee cup frames - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Coffee cup frames published at the 'play' market has multiple vulnerabilities...

contests.npcnewsonline.com XSS vulnerability

Vulnerable URL: http://contests.npcnewsonline.com/images.php?image=219129=2013%20NPC%20Gov.%20Cup=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

PayPal Inc iOS Mobile 4.6.0 Input Validation

Document Title: =============== PayPal Inc 86 iOS 4.6 - Validation & Design Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=915 PayPal Security UID: eff8aq Release Date: ============= 2014-09-30 Vulnerability Laboratory ID VL-ID:...

CVE-2014-6671

The World Cup 2014 Brazil - Xem TV aka vn.letshare.football.worldcup application 2.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6671

The CVE-2014-6671 entry concerns the World Cup 2014 Brazil app - Xem TV (vn.letshare.football.worldcup), version 2.6 for Android. The vulnerability is that the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and access sensitive infor...

CVE-2014-6671

The World Cup 2014 Brazil - Xem TV aka vn.letshare.football.worldcup application 2.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5785

The Bouncy Bill World-Cup aka mominis.GenericAndroid.BouncyBillWorldCup application 1.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Bouncy Bill World-Cup aka mominis.GenericAndroid.BouncyBillWorldCup application 1.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5785

The Bouncy Bill World-Cup aka mominis.GenericAndroid.BouncyBillWorldCup application 1.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Phishers Use Luis Suarez Bite as Bait

The World Cup is the most popular sporting event on the planet, and not just among sports fans; attackers and scammers of all stripes love it as well, as it presents a unique opportunity to separate victims from their money. Phishing and malware scams tied to the World Cup in Brazil have been...

July 2014 Security Bulletin Release

Many around the globe have been following the 2014 FIFA World Cup Brazil™ closely. Regardless of which country you are supporting, many folks have been impressed by the defensive display put on by keeper Tim Howard in a loss against Belgium. It was a great performance highlighting a strong defens...

FIFA World Cup Security Team Accidentally Reveals their Wi-Fi Password

This FIFA World Cup, the security has been really going well and yet no calamitous incident reported so far, other than the security company who is responsible to keep an eye on the event’s security, itself tweeted a photograph of their state-of-the-art monitoring centre that exposed the World Cu...

FIFA World Cup 2014, Big Opportunity for Cybercriminals

With the beginning of FIFA World Cup tournaments in Brazil, Football fever is going viral across the world. Soccer or Football is the most popular sport in the world with billions of fans who don’t even miss a single tournament. Now, this is the most awaited and rejoicing atmosphere for Football...

Threatpost News Wrap, May 23, 2014

Dennis Fisher and Mike Mimoso discuss the US indictments of Chinese army officers for hacking, the Blackshades malware arrests, the new IE 8 zero day and the US prospects in the World Cup. Download: digitalunderground154.mp3 Music by Chris Gonsalves...

Scammers Using World Cup as Phishing Lure

The World Cup is still four months away, but attackers already are ramping up their efforts to defraud fans. As with most major events, such as the Super Bowl, the Olympics and others, attackers are using fans’ enthusiasm for the event as a lure to separate them from their money. When a major eve...