Love Horoscope - Dangerous filesystem permissions, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Love Horoscope published at the 'play' market has multiple vulnerabilities...

CVE-2014-7437

The CVE-2014-7437 entry describes a vulnerability in the Android app “The Love Horoscope Guide” (com.charl.charlylovehoroscopes) 1.0 where SSL/TLS X.509 certificates are not verified by the client when connecting to servers. This allows man-in-the-middle attackers to spoof servers and obtain sens...