EUVD-2014-5440

Malware in sbrugna...

Third Grade Learning Games - Base64 encoded String, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Third Grade Learning Games published at the 'play' market has multiple vulnerabilities...

Preschool Learning Games Train - Base64 encoded String, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Preschool Learning Games Train published at the 'play' market has multiple vulnerabilities...

Kids Toddler Learning Games - Customized SSL, MIT license, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Kids Toddler Learning Games published at the 'play' market has multiple vulnerabilities...

Kids Preschool Learning Games - Base64 encoded String, Customized SSL, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Kids Preschool Learning Games published at the 'play' market has multiple vulnerabilities...

Kids Toy Phone Learning Games - Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application Kids Toy Phone Learning Games published at the 'play' market has multiple vulnerabilities...

Tree house - Learning games - External URLs, SD-card access, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Tree house - Learning games published at the 'play' market has multiple vulnerabilities...

16 Learning Games For Toddlers - SD-card access, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application 16 Learning Games For Toddlers published at the 'play' market has multiple vulnerabilities...

Information disclosure

The Kids Preschool Learning Games aka air.com.tribalnova.ilearnwith.ipad.App3En application 1.3.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5553

The CVE-2014-5553 entry corresponds to The Kids Preschool Learning Games Android app (1.3.2, alias air.com.tribalnova.ilearnwith.ipad.App3En) failing to verify X.509 certificates from SSL servers. This improper TLS/ certificate validation enables potential man-in-the-middle attackers to spoof leg...

CVE-2014-5553

The Kids Preschool Learning Games aka air.com.tribalnova.ilearnwith.ipad.App3En application 1.3.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...