EUVD-2014-6876

Malware in sbrugna...

핑크퐁! 인기동요:보들북 - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application 핑크퐁! 인기동요:보들북 published at the 'play' market has multiple vulnerabilities...

PINKFONG Bedtime - Corrupted files, Exported ContentProvider, Exported components vulnerabilities

HackApp vulnerability scanner discovered that application PINKFONG Bedtime published at the 'play' market has multiple vulnerabilities...

PINKFONG TV - Kids and Babies - Customized SSL, Exported ContentProvider, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application PINKFONG TV - Kids and Babies published at the 'play' market has multiple vulnerabilities...

PINKFONG Car Town - Corrupted files, Exported ContentProvider, Exported components vulnerabilities

HackApp vulnerability scanner discovered that application PINKFONG Car Town published at the 'play' market has multiple vulnerabilities...

PINKFONG Dino World - Corrupted files, Exported ContentProvider, Exported components vulnerabilities

HackApp vulnerability scanner discovered that application PINKFONG Dino World published at the 'play' market has multiple vulnerabilities...

CVE-2014-6998

The PinkFong TV aka kr.co.smartstudy.pinkfongtvandroidgooglemarket application 4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The PinkFong TV aka kr.co.smartstudy.pinkfongtvandroidgooglemarket application 4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6998

The PinkFong TV Android app (package kr.co.smartstudy.pinkfongtv_android_googlemarket, version 4) does not verify X.509 certificates from SSL servers, enabling MITM attackers to spoof servers and obtain sensitive information via a crafted certificate. The root cause is improper certificate valida...

CVE-2014-6998

The PinkFong TV aka kr.co.smartstudy.pinkfongtvandroidgooglemarket application 4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...