Math For Kids - External URLs, SD-card access, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application Math For Kids published at the 'play' market has multiple vulnerabilities...

Math for Kids - Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application Math for Kids published at the 'play' market has multiple vulnerabilities...

CVE-2014-6786

The Math for Kids - Subtraction aka it.tinytap.attsa.deepsub application 1.2.10 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Math for Kids - Subtraction aka it.tinytap.attsa.deepsub application 1.2.10 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6786

The Math for Kids - Subtraction aka it.tinytap.attsa.deepsub application 1.2.10 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6786

The CVE refers to The Math for Kids - Subtraction (aka it.tinytap.attsa.deepsub) Android app version 1.2.10, where the SSL/TLS trust check is not performed (does not verify X.509 certificates). This allows man-in-the-middle attackers to spoof servers and potentially obtain sensitive information v...

CVE-2014-6786: Undefined Security Weakness

The Math for Kids - Subtraction aka it.tinytap.attsa.deepsub application 1.2.10 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-7464

Name of the Vulnerable Software and Affected Versions The Math for Kids - Subtraction aka it.tinytap.attsa.deepsub version 1.2.10 Description The application does not verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information...