EUVD-2014-6573

Malware in sbrugna...

Christmas Photo Frames - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Christmas Photo Frames published at the 'play' market has multiple vulnerabilities...

Love Photo Frames - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Love Photo Frames published at the 'play' market has multiple vulnerabilities...

Hoardings Photo Frames - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Hoardings Photo Frames published at the 'play' market has multiple vulnerabilities...

Nature Photo Frames Dual - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Nature Photo Frames Dual published at the 'play' market has multiple vulnerabilities...

Romantic Photo Frames - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Romantic Photo Frames published at the 'play' market has multiple vulnerabilities...

Wild Animal Photo Frames - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Wild Animal Photo Frames published at the 'play' market has multiple vulnerabilities...

Photo Frames - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Photo Frames published at the 'play' market has multiple vulnerabilities...

Locket Photo Frames - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Locket Photo Frames published at the 'play' market has multiple vulnerabilities...

Flowers Photo Frames - Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Flowers Photo Frames published at the 'play' market has multiple vulnerabilities...

Locket Photo Frames - Dynamic Code Loading, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Locket Photo Frames published at the 'play' market has multiple vulnerabilities...

Flowers Photo Frames - Base64 encoded String, Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Flowers Photo Frames published at the 'play' market has multiple vulnerabilities...

Photo Frames-Unlimited - Customized SSL, MIT license, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Photo Frames-Unlimited published at the 'play' market has multiple vulnerabilities...

Lovely Photo Frames - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Lovely Photo Frames published at the 'play' market has multiple vulnerabilities...

New Year Photo Frames 2016 - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application New Year Photo Frames 2016 published at the 'play' market has multiple vulnerabilities...

New Year Photo Frames 2016 - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application New Year Photo Frames 2016 published at the 'play' market has multiple vulnerabilities...

New Year Photo Frames - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application New Year Photo Frames published at the 'play' market has multiple vulnerabilities...

CVE-2014-6695

The Wedding Photo Frames-Love Pics aka com.WeddingPhotoFramesLovePics application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Wedding Photo Frames-Love Pics aka com.WeddingPhotoFramesLovePics application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6695

The CVE-2014-6695 entry concerns The Wedding Photo Frames-Love Pics (com.WeddingPhotoFramesLovePics) Android app (version 1.0) that fails to verify SSL X.509 certificates. Root cause: improper certificate validation in SSL/TLS communication, enabling man-in-the-middle attackers to spoof servers a...