PT-2014-6992

Name of the Vulnerable Software and Affected Versions LikeHero Get Instagram Likes aka com.fraoula.likehero version 1.0.7 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509...

CVE-2014-6007: Undefined Security Weakness

The LikeHero Get Instagram Likes aka com.fraoula.likehero application 1.0.7 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Vulnerabilities in Android Apps That Allow Intercept of Messages, Photos Outlined

Researchers from the University of New Haven have taken to Youtube this week to publicize vulnerabilities in a dozen Android apps, including Instagram, Vine and OKCupid. Researchers at the University of New Haven’s Cyber Forensics Research and Education Group UNHcFREG have chosen to disclose the...

CVE-2014-5622

The Follow Mania for Instagram aka com.followmania application 1.2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Like4Like: Get Instagram Likes aka com.bepop.bepop application 2.1.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Phonegram - Instagram Download aka com.pinssible.padgram application 1.9.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Follow Mania for Instagram aka com.followmania application 1.2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5622

The CVE-2014-5622 entry concerns the Android app Follow Mania for Instagram (com.followmania) version 1.2.1. The affected component is the SSL certificate validation when establishing TLS connections; the app does not verify X.509 certificates from SSL servers. This behavior enables man-in-the-mi...

CVE-2014-5675

The Phonegram - Instagram Download aka com.pinssible.padgram application 1.9.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5679

The CVE ties to the Android app PopU 2: Get Likes on Instagram (package: com.popuapp.popu) version 1.7.5 . The vulnerability is that the app does not verify X.509 certificates from SSL servers , enabling potential man-in-the-middle attackers to spoof servers and access sensitive information via a...

CVE-2014-5675

The CVE-2014-5675 entry concerns the Phonegram - Instagram Download (com.pinssible.padgram) Android app, version 1.9.5, which does not verify X.509 certificates from SSL servers. Root cause: lack of SSL certificate validation. Impact: enables man-in-the-middle attackers to spoof servers and acces...

CVE-2014-5643

The CVE-2014-5643 entry concerns the Instachat – Instagram Messenger Android app (com.instachat.android), version 1.6.2. Root cause: the app does not verify X.509 certificates from SSL servers. Impact: enables man‑in‑the‑middle attackers to spoof servers and access sensitive information via a cra...

CVE-2014-5585

The CVE-2014-5585 entry applies to the Android app “Like4Like: Get Instagram Likes” (package com.bepop.bepop) version 2.1.5. Multiple connected sources confirm the root cause: the app does not verify X.509 certificates when establishing SSL/TLS connections, allowing MITM attackers to spoof server...

CVE-2014-5622

The Follow Mania for Instagram aka com.followmania application 1.2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5643: Undefined Security Weakness

The Instachat -Instagram Messenger aka com.instachat.android application 1.6.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5679: Undefined Security Weakness

The PopU 2: Get Likes on Instagram aka com.popuapp.popu application 1.7.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-6607

Name of the Vulnerable Software and Affected Versions The Follow Mania for Instagram aka com.followmania application version 1.2.1 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not veri...

CVE-2014-5585: Undefined Security Weakness

The Like4Like: Get Instagram Likes aka com.bepop.bepop application 2.1.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5675: Undefined Security Weakness

The Phonegram - Instagram Download aka com.pinssible.padgram application 1.9.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5622: Undefined Security Weakness

The Follow Mania for Instagram aka com.followmania application 1.2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...