EUVD-2014-6798

Malware in sbrugna...

CVE-2014-6920

The Canal 44 aka com.canal.canal44 application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Command injection

The Canal 44 aka com.canal.canal44 application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6920

The CVE-2014-6920 entry concerns the Canal 44 Android app (1.0) failing to verify X.509 certificates from SSL servers, enabling man‑in‑the‑middle attackers to spoof servers and obtain sensitive information via a crafted certificate. The affected software, vulnerability class, and impact are descr...

CVE-2014-6920: Undefined Security Weakness

The Canal 44 aka com.canal.canal44 application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-7596

Name of the Vulnerable Software and Affected Versions Canal 44 aka com.canal.canal44 application version 1.0 Description The application does not verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted...