EUVD-2014-5735

Malware in sbrugna...

MPC Dubstep Hero - Customized SSL, Dynamic Code Loading, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application MPC Dubstep Hero published at the 'play' market has multiple vulnerabilities...

CVE-2014-5848

The Dubstep Hero aka com.electricpunch.dubstephero application 1.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Dubstep Hero aka com.electricpunch.dubstephero application 1.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5848

The Dubstep Hero aka com.electricpunch.dubstephero application 1.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5848

CVE-2014-5848 affects the Dubstep Hero Android app (com.electricpunch.dubstephero) version 1.9. The issue is failure to verify X.509 certificates when establishing SSL connections, which allows a man-in-the-middle to spoof servers and potentially exfiltrate sensitive data via a crafted certificat...

PT-2014-6833

Name of the Vulnerable Software and Affected Versions The Dubstep Hero aka com.electricpunch.dubstephero version 1.9 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate because the application does not verify X.509...

CVE-2014-5848: Undefined Security Weakness

The Dubstep Hero aka com.electricpunch.dubstephero application 1.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...