Livescore Football Soccer - Dynamic Code Loading, External URLs, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application Livescore Football Soccer published at the 'play' market has multiple vulnerabilities...

Live Soccer Scores - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Live Soccer Scores published at the 'play' market has multiple vulnerabilities...

My Goal: Your Soccer Trainer - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application My Goal: Your Soccer Trainer published at the 'play' market has multiple vulnerabilities...

Italian Soccer 2015/2016 - Dynamic Code Loading, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Italian Soccer 2015/2016 published at the 'play' market has multiple vulnerabilities...

Soccer Tactics Board - Customized SSL, Dynamic Code Loading, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Soccer Tactics Board published at the 'play' market has multiple vulnerabilities...

Nike Soccer - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Nike Soccer published at the 'play' market has multiple vulnerabilities...

90min - Live Soccer News App - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application 90min - Live Soccer News App published at the 'play' market has multiple vulnerabilities...

californiasoccerleague.com XSS vulnerability

Vulnerable URL: http://www.californiasoccerleague.com/fives-team-players.php?teamname=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

soccerprofiling.co.uk XSS vulnerability

Vulnerable URL: http://soccerprofiling.co.uk/shop/basketnew.php?pagefile=" Details: Description| Value ---|--- Patched:| Yes, at 07.12.2015 Latest check for patch:| 07.12.2015 16:32 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google...

CVE-2014-5944

The Soccer Blitz aka soccer.blitz application 1.06 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Code injection

The Soccer Blitz aka soccer.blitz application 1.06 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5944

The Soccer Blitz aka soccer.blitz application 1.06 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5944

CVE-2014-5944 affects the Android app Soccer Blitz (soccer.blitz) version 1.06, where the app does not verify X.509 certificates from SSL servers. This weakens SSL/TLS trust and enables a man-in-the-middle to spoof servers and read sensitive data exposed in the crafted cert. No explicit exploitat...

Symantec discovered Android Malware Toolkit named Dendroid

Android platform is becoming vulnerable day by day and hackers always try to manipulate android by applying novel techniques. In this regard, Symantec researchers have found a new android malware toolkit named “Dendroid”. Previously Symantec found an Android Remote admin tool named AndroRAT is...

Scammers Using World Cup as Phishing Lure

The World Cup is still four months away, but attackers already are ramping up their efforts to defraud fans. As with most major events, such as the Super Bowl, the Olympics and others, attackers are using fans’ enthusiasm for the event as a lure to separate them from their money. When a major eve...

Lovely tokens and the September 2013 security updates

Helen Hunt Jackson famously wrote, “By all lovely tokens September is here, with summer’s best of weather and autumn’s best of cheer.” I share Helen’s clear adoration for this time of year. As a sports fan, there are so many “lovely tokens” to enjoy. The baseball pennant race is heating up, colle...

FOOT Gestion CMS SQL Injection

Product: FOOT Gestion Version: - Vendor: Winsoft Vendor site:http://www.footgestion.ch Status: fixed Level: High ========= Description ========= FOOT Gestion is a soccer team management CMS. The solution is based on a software and a CMS website. The website module is affected by a SQL injection...

FOOT Gestion CMS SQL Injection Vulnerability

FOOT Gestion CMS suffers from a remote SQL injection vulnerability. Product: FOOT Gestion Version: - Vendor: Winsoft Vendor site:http://www.footgestion.ch Status: fixed Level: High ========= Description ========= FOOT Gestion is a soccer team management CMS. The solution is based on a software an...

Indonesian Soccer Association (PSSI) website hijacked by hackers !

Indonesian Soccer Association PSSI website hijacked by hackers ! Hackers apparently hijacked the website of the Indonesian Soccer Association PSSI, placing an anti-corruption message on the PSSI's homepage. The homepage currently displays a mouse holding two smoking pistol and carries the message...

Unfixed XSS vulnerability at www.carolinaselectsoccer.com

Security researcher SaMTHG, has submitted on 03/09/2008 a cross-site-scripting XSS vulnerability affecting www.carolinaselectsoccer.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 18/09/2008. It is...