EUVD-2014-5649

Malware in sbrugna...

Cut the Rope: Magic - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Cut the Rope: Magic published at the 'play' market has multiple vulnerabilities...

Cut the Rope: Experiments FREE - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Cut the Rope: Experiments FREE published at the 'play' market has multiple vulnerabilities...

Cut the Rope FULL FREE - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Cut the Rope FULL FREE published at the 'play' market has multiple vulnerabilities...

Information disclosure

The Cut the Rope: Time Travel aka com.zeptolab.timetravel.free.google application 1.3.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5762

The CVE-2014-5762 entry concerns the Android app Cut the Rope: Time Travel (com.zeptolab.timetravel.free.google) version 1.3.4. The root cause is that the app does not verify X.509 certificates from SSL servers, enabling a man-in-the-middle to spoof servers and exfiltrate sensitive information vi...

Fake Angry Birds Game spreading Malware from Android Market

Fake Angry Birds Game spreading Malware from Android Market From last week premium rate SMS Trojans surfaced in the Android Market. Google has pulled 22 apps that are masquerading as legitimate versions of popular games like Angry Birds and Cut the Rope. Security researchers have discovered a way...