EUVD-2014-5431

Malware in sbrugna...

SongPop - Customized SSL, Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application SongPop published at the 'play' market has multiple vulnerabilities...

SongPop 2 - Music Quiz - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application SongPop 2 - Music Quiz published at the 'play' market has multiple vulnerabilities...

CVE-2014-5544

The SongPop aka air.com.freshplanet.games.WaM application 1.21.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The SongPop aka air.com.freshplanet.games.WaM application 1.21.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5544

CVE-2014-5544 affects the SongPop Android app (package air.com.freshplanet.games.WaM) version 1.21.2. The vulnerability is that the app does not verify X.509 certificates from SSL servers, enabling man‑in‑the‑middle attackers to spoof servers and obtain sensitive information via a crafted certifi...

CVE-2014-5544

The SongPop aka air.com.freshplanet.games.WaM application 1.21.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5544: Undefined Security Weakness

The SongPop aka air.com.freshplanet.games.WaM application 1.21.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-6529

Name of the Vulnerable Software and Affected Versions SongPop aka air.com.freshplanet.games.WaM version 1.21.2 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509 certificate...