EUVD-2014-5414

Malware in sbrugna...

tapjoy.force.com XSS vulnerability

Open Bug Bounty ID: OBB-453133 Description| Value ---|--- Affected Website:| tapjoy.force.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

Tapjoy SHA - Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application Tapjoy SHA published at the 'play' market has multiple vulnerabilities...

CVE-2014-5527

The Tapjoy library for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Tapjoy library for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5527

The CVE-2014-5527 entry concerns the Tapjoy library for Android, which does not verify X.509 certificates from SSL servers. This root cause enables man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as described in multiple connected records. ...

CVE-2014-5527

The Tapjoy library for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5527: Undefined Security Weakness

The Tapjoy library for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-6513

Name of the Vulnerable Software and Affected Versions Tapjoy library for Android affected versions not specified Description The issue concerns the Tapjoy library for Android, which fails to verify X.509 certificates from SSL servers. This allows man-in-the-middle attackers to spoof servers and...