EUVD-2014-5440

Malware in sbrugna...

Preschool Learning Games Train - Base64 encoded String, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Preschool Learning Games Train published at the 'play' market has multiple vulnerabilities...

Kids Preschool Learning Games - Base64 encoded String, Customized SSL, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Kids Preschool Learning Games published at the 'play' market has multiple vulnerabilities...

Information disclosure

The Kids Preschool Learning Games aka air.com.tribalnova.ilearnwith.ipad.App3En application 1.3.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5553

The CVE-2014-5553 entry corresponds to The Kids Preschool Learning Games Android app (1.3.2, alias air.com.tribalnova.ilearnwith.ipad.App3En) failing to verify X.509 certificates from SSL servers. This improper TLS/ certificate validation enables potential man-in-the-middle attackers to spoof leg...

CVE-2014-5553

The Kids Preschool Learning Games aka air.com.tribalnova.ilearnwith.ipad.App3En application 1.3.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...