AVM FRITZ!Box Firmware Signature Bypass

Advisory: AVM FRITZ!Box: Firmware Signature Bypass The signature check of FRITZ!Box firmware images is flawed. Malicious code can be injected into firmware images without breaking the RSA signature. The code will be executed either if a manipulated firmware image is uploaded by the victim or if t...

CVE-2014-7390

The Enchanted Fashion Crush aka com.tabtale.springcrushbundleint application 1.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7390

CVE-2014-7390 concerns the Android app “The Enchanted Fashion Crush” (package com.tabtale.springcrushbundleint) version 1.0.0, where SSL TLS server certificate verification is not performed. This enables a man-in-the-middle attacker to spoof the server and obtain sensitive data via a crafted cert...

CVE-2013-7390

creationtimestamp| type| source ---|---|--- 2013-11-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/29812 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/desktopcentralfileupload.rb 2020-01-27...