Mail.ru: reflected XSS on healt.mail.ru

Reflected XSS via GET paramters in quiz game on promo site in health.mail.ru subdomain. .health.mail.ru was in the bug bounty program's scope on the moment of report submission...

1 Word - a free quiz game - Base64 encoded String, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application 1 Word - a free quiz game published at the 'play' market has multiple vulnerabilities...

Boom!!! Quiz Game - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Boom!!! Quiz Game published at the 'play' market has multiple vulnerabilities...

Capital Cities Quiz Game - Dynamic Code Loading, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Capital Cities Quiz Game published at the 'play' market has multiple vulnerabilities...

Quiz Game: League of Legends - Dynamic Code Loading, External URLs, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Quiz Game: League of Legends published at the 'play' market has multiple vulnerabilities...

Animal Quiz Game - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Animal Quiz Game published at the 'play' market has multiple vulnerabilities...

Eureka! Quiz Game - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Eureka! Quiz Game published at the 'play' market has multiple vulnerabilities...

Shadow Quiz Game - Cartoons - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Shadow Quiz Game - Cartoons published at the 'play' market has multiple vulnerabilities...

80's Quiz Game - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application 80's Quiz Game published at the 'play' market has multiple vulnerabilities...

Geography Quiz Game 3D - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Geography Quiz Game 3D published at the 'play' market has multiple vulnerabilities...

Superbuzzer Trivia Quiz Game - Dangerous filesystem permissions, Hardcoded secrets, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application Superbuzzer Trivia Quiz Game published at the 'play' market has multiple vulnerabilities...

My Violeta Quiz Game - ContentProvider mode not defined, Dynamic Code Loading, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application My Violeta Quiz Game published at the 'play' market has multiple vulnerabilities...

CVE-2014-6935

The CVE-2014-6935 entry concerns the ColorMania - Color Quiz Game (com.ColormaniaColoringGames) for Android, version 1.4, where SSL/TLS certificate validation is not performed. This lack of X.509 verification enables man-in-the-middle attackers to spoof servers and obtain sensitive data via a cra...

CVE-2014-6773

The CIH Quiz game aka com.bowenehs.cihquizgameapp application 1.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Code injection

The CIH Quiz game aka com.bowenehs.cihquizgameapp application 1.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6773

The CIH Quiz game aka com.bowenehs.cihquizgameapp application 1.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...