EUVD-2014-7504

Malware in sbrugna...

Dino Zoo - BSD license, Base64 encoded String, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Dino Zoo published at the 'play' market has multiple vulnerabilities...

CVE-2014-7633

The Dino Zoo aka com.tappocket.dinozoostar application 1.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Dino Zoo aka com.tappocket.dinozoostar application 1.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7633

The CVE-2014-7633 entry concerns the Android app The Dino Zoo (com.tappocket.dinozoostar) version 1.5, which does not verify X.509 certificates from SSL servers. This flaw enables potential man-in-the-middle attackers to spoof legitimate servers and exfiltrate sensitive information via crafted ce...

CVE-2014-7633

The Dino Zoo aka com.tappocket.dinozoostar application 1.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...