GUYZ - Gay Chat & Gay Dating - Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application GUYZ - Gay Chat & Gay Dating published at the 'play' market has multiple vulnerabilities...

Gay Chat - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Gay Chat published at the 'play' market has multiple vulnerabilities...

CVE-2014-5861

The BoyAhoy - Gay Chat aka com.boyahoy.android application 4.3.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5861

The BoyAhoy - Gay Chat aka com.boyahoy.android application 4.3.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5861

The CVE-2014-5861 entry affects the Android app BoyAhoy - Gay Chat (com.boyahoy.android) , version 4.3.6 . Root cause: the app does not verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Bas...

PT-2014-6846

Name of the Vulnerable Software and Affected Versions The BoyAhoy - Gay Chat aka com.boyahoy.android version 4.3.6 Description The application does not verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted...

CVE-2014-5861: Undefined Security Weakness

The BoyAhoy - Gay Chat aka com.boyahoy.android application 4.3.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Jack'd - Gay Chat & Dating aka mobi.jackd.android application 1.9.0a for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5779: Undefined Security Weakness

The Jack'd - Gay Chat & Dating aka mobi.jackd.android application 1.9.0a for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-6764

Name of the Vulnerable Software and Affected Versions Jack'd - Gay Chat & Dating version 1.9.0a Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate because the application does not verify X.509 certificates from SSL...