Princess Makeover: Girls Games - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Princess Makeover: Girls Games published at the 'play' market has multiple vulnerabilities...

Wedding Spa Salon-Girls Games - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Wedding Spa Salon-Girls Games published at the 'play' market has multiple vulnerabilities...

Celebrity SPA - girls games - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Celebrity SPA - girls games published at the 'play' market has multiple vulnerabilities...

mermaid bathing girls games - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application mermaid bathing girls games published at the 'play' market has multiple vulnerabilities...

Fashion Design - girls games - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Fashion Design - girls games published at the 'play' market has multiple vulnerabilities...

Makeup Spa - Girls Games - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Makeup Spa - Girls Games published at the 'play' market has multiple vulnerabilities...

Nail Makeover - Girls Games - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Nail Makeover - Girls Games published at the 'play' market has multiple vulnerabilities...

Prom Spa Salon - Girls Games - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Prom Spa Salon - Girls Games published at the 'play' market has multiple vulnerabilities...

Fashion Designer Girls Games - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Fashion Designer Girls Games published at the 'play' market has multiple vulnerabilities...

CVE-2014-5838

The CVE-2014-5838 entry concerns The Girls Games - Shoes Maker (com.g6677.android.shoemaker) on Android, version 1.0.1, which does not verify X.509 certificates from SSL servers. This lax TLS handling allows MITM attackers to spoof servers and potentially obtain sensitive information via a crafte...