EUVD-2014-5735

Malware in sbrugna...

Dubstep and EDM Maker - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Dubstep and EDM Maker published at the 'play' market has multiple vulnerabilities...

Dubstep Beatpad - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Dubstep Beatpad published at the 'play' market has multiple vulnerabilities...

EDM MAKER Dubstep Creator Free - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application EDM MAKER Dubstep Creator Free published at the 'play' market has multiple vulnerabilities...

MPC Dubstep Hero - Customized SSL, Dynamic Code Loading, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application MPC Dubstep Hero published at the 'play' market has multiple vulnerabilities...

DUBSTEP CREATOR - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application DUBSTEP CREATOR published at the 'play' market has multiple vulnerabilities...

ButtonBeats Dubstep Balls - Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application ButtonBeats Dubstep Balls published at the 'play' market has multiple vulnerabilities...

Dubstep Music Beat Legends - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Dubstep Music Beat Legends published at the 'play' market has multiple vulnerabilities...

Trance Creator: Dubstep Pad - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Trance Creator: Dubstep Pad published at the 'play' market has multiple vulnerabilities...

ButtonBass Dubstep Cube - Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application ButtonBass Dubstep Cube published at the 'play' market has multiple vulnerabilities...

Skrillex Dubstep Music Pad - Dynamic Code Loading, External URLs, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Skrillex Dubstep Music Pad published at the 'play' market has multiple vulnerabilities...

Dubstep Pads - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Dubstep Pads published at the 'play' market has multiple vulnerabilities...

Dubstep - Avoid the White Tile - Base64 encoded String, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Dubstep - Avoid the White Tile published at the 'play' market has multiple vulnerabilities...

Dubstep Drum Pad Machine - Customized SSL, Dangerous filesystem permissions, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Dubstep Drum Pad Machine published at the 'play' market has multiple vulnerabilities...

CVE-2014-5848

The Dubstep Hero aka com.electricpunch.dubstephero application 1.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Dubstep Hero aka com.electricpunch.dubstephero application 1.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5848

The Dubstep Hero aka com.electricpunch.dubstephero application 1.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5848

CVE-2014-5848 affects the Dubstep Hero Android app (com.electricpunch.dubstephero) version 1.9. The issue is failure to verify X.509 certificates when establishing SSL connections, which allows a man-in-the-middle to spoof servers and potentially exfiltrate sensitive data via a crafted certificat...