CVE-2014-5934

The Flurv Chat aka com.flurv.android application 4.3.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Flurv Chat aka com.flurv.android application 4.3.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5934

The Flurv Chat aka com.flurv.android application 4.3.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5934

CVE-2014-5934 affects the Flurv Chat app (com.flurv.android) version 4.3.3 on Android, where SSL/TLS connections do not verify X.509 certificates. This enables man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. The connected sources corroborat...

PT-2014-6919

Name of the Vulnerable Software and Affected Versions Flurv Chat aka com.flurv.android version 4.3.3 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509 certificates from SSL...

CVE-2014-5934: Undefined Security Weakness

The Flurv Chat aka com.flurv.android application 4.3.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6392

Cross-site scripting XSS vulnerability in the Facebook app 14.0 and the Facebook Messenger app 10.0 for iOS allows remote attackers to inject arbitrary web script or HTML via a crafted filename extension that is improperly handled during MIME sniffing of chat traffic. NOTE: the vendor disputes th...

Cross site scripting

Cross-site scripting XSS vulnerability in the Facebook app 14.0 and the Facebook Messenger app 10.0 for iOS allows remote attackers to inject arbitrary web script or HTML via a crafted filename extension that is improperly handled during MIME sniffing of chat traffic. NOTE: the vendor disputes th...

PT-2014-7206 · Facebook · Facebook App +1

Name of the Vulnerable Software and Affected Versions: Facebook app version 14.0 Facebook Messenger app version 10.0 Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via a crafted filename extension that is improperly handled during MIME...

ChatSecure IM 2.2.4 iOS - Persistent Cross-Site Scripting

ChatSecure IM 2.2.4 iOS - Persistent Cross-Site Scripting Document Title: =============== ChatSecure IM v2.2.4 iOS - Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1317 Release Date: ============= 2014-09-10 Vulnerability...

CVE-2014-5861

The BoyAhoy - Gay Chat aka com.boyahoy.android application 4.3.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5861

The BoyAhoy - Gay Chat aka com.boyahoy.android application 4.3.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5861

The CVE-2014-5861 entry affects the Android app BoyAhoy - Gay Chat (com.boyahoy.android) , version 4.3.6 . Root cause: the app does not verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Bas...

PT-2014-6846

Name of the Vulnerable Software and Affected Versions The BoyAhoy - Gay Chat aka com.boyahoy.android version 4.3.6 Description The application does not verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted...

CVE-2014-5861: Undefined Security Weakness

The BoyAhoy - Gay Chat aka com.boyahoy.android application 4.3.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5833

The FriendCaster Chat aka com.handmark.friendcaster.chat application 2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Jack'd - Gay Chat & Dating aka mobi.jackd.android application 1.9.0a for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The FriendCaster Chat aka com.handmark.friendcaster.chat application 2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5833

The FriendCaster Chat aka com.handmark.friendcaster.chat application 2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5833

The CVE-2014-5833 entry concerns the FriendCaster Chat app (com.handmark.friendcaster.chat) for Android. The affected component is the SSL/TLS certificate verification in the app, which does not verify X.509 certificates from SSL servers. This behavior can enable a man-in-the-middle (MITM) attack...