EUVD-2014-5580

Malware in sbrugna...

Slots Vacation - FREE Slots - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Slots Vacation - FREE Slots published at the 'play' market has multiple vulnerabilities...

CVE-2014-5693

The Slots Vacation - FREE Slots aka com.scopely.slotsvacation application 1.47.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Slots Vacation - FREE Slots aka com.scopely.slotsvacation application 1.47.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5693

The Slots Vacation - FREE Slots aka com.scopely.slotsvacation application 1.47.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5693

The Slots Vacation - FREE Slots (Android, package com.scopely.slotsvacation) is affected by CVE-2014-5693: app version 1.47.2 does not verify X.509 certificates from SSL servers, enabling MITM attackers to spoof servers and obtain sensitive information via a crafted certificate. Root cause is mis...

CVE-2014-5693: Undefined Security Weakness

The Slots Vacation - FREE Slots aka com.scopely.slotsvacation application 1.47.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...