EUVD-2014-7329

Malware in sbrugna...

Valentine Wedding Day - Customized SSL, Dangerous filesystem permissions, Hardcoded secrets vulnerabilities

HackApp vulnerability scanner discovered that application Valentine Wedding Day published at the 'play' market has multiple vulnerabilities...

Where's My Valentine? - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Where's My Valentine? published at the 'play' market has multiple vulnerabilities...

Star Girl: Valentine Hearts - Certificates or keys found, Dynamic Code Loading, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Star Girl: Valentine Hearts published at the 'play' market has multiple vulnerabilities...

Valentine Day Photo Frame 2016 - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Valentine Day Photo Frame 2016 published at the 'play' market has multiple vulnerabilities...

Loving you Valentine Theme - External URLs, Possible privilege escalation, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Loving you Valentine Theme published at the 'play' market has multiple vulnerabilities...

CVE-2014-7458

The BloomYou Valentine aka com.bloomyouteam.bloomyou.valentine application 2.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The BloomYou Valentine aka com.bloomyouteam.bloomyou.valentine application 2.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7458

The CVE-2014-7458 entry concerns the BloomYou Valentine Android app (package com.bloomyouteam.bloomyou.valentine, version 2.4). The vulnerability is failed TLS/SSL certificate validation: the app does not verify X.509 certificates from SSL servers. This allows an attacker to perform man-in-the-mi...

CVE-2014-7458

The BloomYou Valentine aka com.bloomyouteam.bloomyou.valentine application 2.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...