NBA General Manager 2016 - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application NBA General Manager 2016 published at the 'play' market has multiple vulnerabilities...

Sports Alerts - NBA edition - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Sports Alerts - NBA edition published at the 'play' market has multiple vulnerabilities...

NBA LIVE Companion - Dynamic Code Loading, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application NBA LIVE Companion published at the 'play' market has multiple vulnerabilities...

marca.com XSS vulnerability

Vulnerable URL: http://www.marca.com/baloncesto/nba/albumalert/XSSPOSED/...

sports.espn.go.com XSS vulnerability

Vulnerable URL: http://sports.espn.go.com/nba/draft2015/insider--alert/xssposed/...

nba.com XSS vulnerability

Vulnerable URL: http://www.nba.com/raptors/video/search/?ls=channav=%3C/script%3Ev0raz%3Csvg/onload=alert/XSSPosed/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 432 Google...

nba.com XSS vulnerability

Vulnerable URL: http://www.nba.com/spurs/video/search/?ls=channav=%3C/script%3Ev0raz%3Csvg/onload=alert/XSSPosed/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 432 Google...

nba.com XSS vulnerability

Vulnerable URL: http://www.nba.com/suns/video/search/?ls=channav=%3C/script%3Ev0raz%3Csvg/onload=alert/XSSPosed/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 432 Google...

nba.com XSS vulnerability

Open Bug Bounty ID: OBB-71670 Description| Value ---|--- Affected Website:| nba.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

nba.com XSS vulnerability

Vulnerable URL: http://www.nba.com/grizzlies/video/search/?ls=channav=%3C/script%3Ev0raz%3Csvg/onload=alert/XSSPosed/%3E Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 12:27 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclose...

nba.com XSS vulnerability

Open Bug Bounty ID: OBB-71664 Description| Value ---|--- Affected Website:| nba.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

nba.com XSS vulnerability

Vulnerable URL: http://www.nba.com/warriors/video/search/?ls=channav=%3C/script%3Ev0raz%3Csvg/onload=alert/XSSPosed/%3E Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 12:27 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

nba.com XSS vulnerability

Open Bug Bounty ID: OBB-71657 Description| Value ---|--- Affected Website:| nba.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2014-6700

The NBA Game Time 2013-2014 aka com.nbadigital.gametimelite application 4.11 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The NBA Game Time 2013-2014 aka com.nbadigital.gametimelite application 4.11 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6700

The CVE-2014-6700 entry concerns the NBA Game Time 2013-2014 Android app (com.nbadigital.gametimelite) version 4.11. The root cause is failure to verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and access sensitive information via a crafted certif...

CVE-2014-6700

The NBA Game Time 2013-2014 aka com.nbadigital.gametimelite application 4.11 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Sun JRE/SDK 1.x Untrusted Applet Java Security Model Violation Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7824/info It has been reported that the Sun Java Runtime Environment does not properly protect trusted java applets. Because of this, it may be possible for an attacker to use a malicious applet to gain access to sensitiv...

Malware Sites Use YouTube to Hide Trojan

Unsuspecting users looking for videos on recent events like the Gulf of Mexico oil spill and the NBA playoffs are being directed to maliciously crafted websites with videos that appear to be identical to YouTube postings. Read the full article. InfoSecurity...