Daily Yoga - Yoga Fitness App - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Daily Yoga - Yoga Fitness App published at the 'play' market has multiple vulnerabilities...

Lenovo Caught Using Rootkit to Secretly Install Unremovable Software

Two years ago Chinese firm Lenovo got banned from supplying equipment for networks of the intelligence and defense services various countries due to hacking and spying concerns. Earlier this year, Lenovo was caught red-handed for selling laptops pre-installed with Superfish malware. One of the mo...

CVE-2014-6768

The Anywhere Anytime Yoga Workout aka com.bayart.yoga application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Anywhere Anytime Yoga Workout aka com.bayart.yoga application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6768

The CVE-2014-6768 entry concerns the Anywhere Anytime Yoga Workout (com.bayart.yoga) Android app, version 1.0. The root cause is that the app does not verify X.509 certificates when establishing SSL/TLS connections, which enables man-in-the-middle attackers to spoof servers and exfiltrate sensiti...

Bilyana Iliykova SQL Injection

|=----=----=----=----=----=--------=| | | | /\ /\ \ /\ /\ \ | | //\ /\ \ \L\ \ \ \ \ Turki$ hackers | | \ \ \ \ \ '\ \ \ | | \ \ \ \ \ \L\ \ \ \ \ \ | | \ \ \ / \ \ \ | | // // //// | | | | | |=----=----=----=----=----=--------=|...