Unblock king - Dangerous filesystem permissions, Runtime privilege escalation, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Unblock king published at the 'play' market has multiple vulnerabilities...

CVE-2014-5268

The Fasttoggle module 7.x-1.3 and 7.x-1.4 for Drupal allows remote attackers to block or unblock an account via a crafted user status link...

Design/Logic Flaw

The Unblock Me FREE aka com.kiragames.unblockmefree application 1.4.4.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5653

The CVE-2014-5653 entry concerns the Android app Unblock Me FREE (com.kiragames.unblockmefree) version 1.4.4.2, which does not verify X.509 certificates from SSL servers. This causes potential MITM risk where an attacker could spoof the server and obtain sensitive information via a crafted certif...

CVE-2012-1633

CVE-2012-1633 affects Drupal via the Password Policy module (6.x-1.x prior to 6.x-1.4 and 7.x-1.0 beta3). The vulnerability is a Cross-site Request Forgery (CSRF) that allows remote attackers to hijack the authentication of administrative users for requests that unblock a user. Impact is administ...

CVE-2012-1578

Multiple cross-site request forgery CSRF vulnerabilities in MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 allow remote attackers to hijack the authentication of users with the block permission for requests that 1 block a user via a request to the Block module or 2 unblock a user via a...

Indian ISPs get court relief, Torrent Sites Unblocked

Indian ISPs get court relief, Torrent Sites Unblocked After weeks of confusion and frustration with blocked websites, the mess finally looks to be clearing. Indians are all heaving a sigh of relief because their ISPs have unblocked the access to the file-sharing, video-streaming BitTorrent sites...