BINGO Blitz - FREE Bingo+Slots - Dangerous filesystem permissions, Exported ContentProvider, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application BINGO Blitz - FREE Bingo+Slots published at the 'play' market has multiple vulnerabilities...

GameTwist Slots - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application GameTwist Slots published at the 'play' market has multiple vulnerabilities...

Big Fish Casino - Free SLOTS - BSD license, Customized SSL, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Big Fish Casino - Free SLOTS published at the 'play' market has multiple vulnerabilities...

DoubleU Casino - FREE Slots - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application DoubleU Casino - FREE Slots published at the 'play' market has multiple vulnerabilities...

Slots Vegas™ - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Slots Vegas™ published at the 'play' market has multiple vulnerabilities...

Slots Master™ - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Slots Master™ published at the 'play' market has multiple vulnerabilities...

3D Slots RPG【HD Slot Machine】 - Base64 encoded String, Corrupted files, Dynamic Code Loading vulnerabilities

HackApp vulnerability scanner discovered that application 3D Slots RPG【HD Slot Machine】 published at the 'play' market has multiple vulnerabilities...

Big Win Slots™ - Slot Machines - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Big Win Slots™ - Slot Machines published at the 'play' market has multiple vulnerabilities...

Slots Go! - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Slots Go! published at the 'play' market has multiple vulnerabilities...

3D Strip Bingo Slots - Free - Dangerous filesystem permissions, Dynamic Code Loading, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application 3D Strip Bingo Slots - Free published at the 'play' market has multiple vulnerabilities...

Slots - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Slots published at the 'play' market has multiple vulnerabilities...

Wiping Out a Malicious Campaign Abusing Chinese Ad Platform

At FireEye Labs, we have discovered another well-crafted malvertising campaign that uses the ad API of one of the world’s largest search engines: China-based Baidu. The attacker employs a simple HTML redirector instead of shellcode or an exploit in an apparently benign-looking website. This leads...

Wiping Out a Malicious Campaign Abusing Chinese Ad Platform

At FireEye Labs, we have discovered another well-crafted malvertising campaign that uses the ad API of one of the world’s largest search engines: China-based Baidu. The attacker employs a simple HTML redirector instead of shellcode or an exploit in an apparently benign-looking website. This leads...

WordPress Plugin Booking Calendar Contact Form 1.1.24 - Multiple Vulnerabilities

Exploit Title: WordPress appointment-booking-calendar =1.1.24 - Privilege escalation Managing calendars & Persistent XSS Date: 2016-01-28 Google Dork: Index of /wordpress/wp-content/plugins/appointment-booking-calendar/ Exploit Author: Joaquin Ramirez Martinez i0 security-lab Software Link:...

WordPress Plugin Booking Calendar Contact Form 1.1.24 - addslashes SQL Injection

Exploit Title: WordPress appointment-booking-calendar =1.1.24 - SQL injection through ´addslashes´ wordpress ´wpmagicquotes´ function Date: 2016-01-28 Google Dork: Index of /wordpress/wp-content/plugins/appointment-booking-calendar/ Exploit Author: Joaquin Ramirez Martinez now i0 security-lab...

WordPress Booking Calendar Contact Form 1.1.24 Plugin - Multiple Vulnerabilities

Exploit for php platform in category web applications Exploit Title: WordPress appointment-booking-calendar =1.1.24 - Privilege escalation Managing calendars & Persistent XSS Date: 2016-01-28 Google Dork: Index of /wordpress/wp-content/plugins/appointment-booking-calendar/ Exploit Author: Joaquin...

WordPress Plugin Booking Calendar Contact Form 1.1.24 - Multiple Vulnerabilities

WordPress Plugin Booking Calendar Contact Form 1.1.24 - Multiple Vulnerabilities Exploit Title: WordPress appointment-booking-calendar =1.1.24 - Privilege escalation Managing calendars & Persistent XSS Date: 2016-01-28 Google Dork: Index of...

CVE-2014-7460

The Slots Heaven:FREE Slot Machine aka com.twelvegigs.heaven.slots application 1.123 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Slots Heaven:FREE Slot Machine aka com.twelvegigs.heaven.slots application 1.123 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7460

The CVE-2014-7460 entry concerns the Android app Slots Heaven:FREE Slot Machine (com.twelvegigs.heaven.slots) 1.123, which does not verify X.509 certificates when connecting to SSL servers. The underlying vulnerability is improper certificate validation, allowing MITM attackers to spoof servers a...