EUVD-2014-7314

Malware in sbrugna...

Face Fun - Photo Collage Maker - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Face Fun - Photo Collage Maker published at the 'play' market has multiple vulnerabilities...

Photo Collage Editor Pro - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Photo Collage Editor Pro published at the 'play' market has multiple vulnerabilities...

Photo Collage - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Photo Collage published at the 'play' market has multiple vulnerabilities...

Baby Photo Collage Maker - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Baby Photo Collage Maker published at the 'play' market has multiple vulnerabilities...

PIP Camera Photo Collage Maker - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application PIP Camera Photo Collage Maker published at the 'play' market has multiple vulnerabilities...

Photo Collage Editor - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Photo Collage Editor published at the 'play' market has multiple vulnerabilities...

Photo Collage Editor - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Photo Collage Editor published at the 'play' market has multiple vulnerabilities...

Photo Collage - Pic Editing - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Photo Collage - Pic Editing published at the 'play' market has multiple vulnerabilities...

Photo Collage Art - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Photo Collage Art published at the 'play' market has multiple vulnerabilities...

Lipix - Photo Collage & Editor - Customized SSL, Redefined SSL Common Names verifier, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Lipix - Photo Collage & Editor published at the 'play' market has multiple vulnerabilities...

Photo Collage Editor - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Photo Collage Editor published at the 'play' market has multiple vulnerabilities...

Mirror Photo Collage Maker - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Mirror Photo Collage Maker published at the 'play' market has multiple vulnerabilities...

Photo Collage - Customized SSL, Dangerous filesystem permissions, Runtime privilege escalation vulnerabilities

HackApp vulnerability scanner discovered that application Photo Collage published at the 'play' market has multiple vulnerabilities...

Photo Collage - Layout Editor - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Photo Collage - Layout Editor published at the 'play' market has multiple vulnerabilities...

Photo Collage Maker - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Photo Collage Maker published at the 'play' market has multiple vulnerabilities...

Photo Collage Maker - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Photo Collage Maker published at the 'play' market has multiple vulnerabilities...

Photo Collage - InstaMag - Customized SSL, Dangerous filesystem permissions, Runtime privilege escalation vulnerabilities

HackApp vulnerability scanner discovered that application Photo Collage - InstaMag published at the 'play' market has multiple vulnerabilities...

CVE-2014-7443

The CVE-2014-7443 entry affects the Android app Face Fun Photo Collage Maker 2 (package com.kauf.facefunphotocollagemaker2) version 1.3.0. The vulnerability arises because the app does not verify X.509 SSL/TLS certificates when connecting to servers, enabling a man-in-the-middle attacker to spoof...