CVE-2014-6651

The CVE-2014-6651 entry concerns the Planet of the Vapes Forum Android app (version 3.7.9) which does not verify X.509 certificates from SSL servers, enabling MITM attackers to spoof servers and obtain sensitive information via a crafted certificate. This is documented across several sources (NVD...

CVE-2014-6655

The CVE-2014-6655 entry concerns the Tortoise Forum (org.tortoiseforum.android.forumrunner) Android app version 3.5.16. The vulnerability is due to the app not verifying X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and retrieve sensitive information v...

CVE-2014-6662

The CVE-2014-6662 entry concerns the Forum Krstarice Android app (package com.tapatalk.forumkrstaricacom) version 3.5.14. The vulnerability is that the app does not verify X.509 certificates from SSL servers, enabling a man-in-the-middle attacker to spoof servers and obtain sensitive information ...

CVE-2014-6670

CVE-2014-6670 affects the Android app “SingaporeMotherhood Forum” (com.tapatalk.singaporemotherhoodcomforum) version 3.6.6. The root cause is that the application does not verify X.509 certificates from SSL servers, allowing MITM attackers to spoof servers and obtain sensitive information via a c...

CVE-2014-6652

The Wizaz Forum aka com.tapatalk.wizazplforum application 3.6.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6662

The Forum Krstarice aka com.tapatalk.forumkrstaricacom application 3.5.14 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-7329

Name of the Vulnerable Software and Affected Versions The Planet of the Vapes Forum application version 3.7.9 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate because the application does not verify X.509...

PT-2014-7330

Name of the Vulnerable Software and Affected Versions The Wizaz Forum aka com.tapatalk.wizazplforum version 3.6.4 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509...

CVE-2014-6652: Undefined Security Weakness

The Wizaz Forum aka com.tapatalk.wizazplforum application 3.6.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6670: Undefined Security Weakness

The SingaporeMotherhood Forum aka com.tapatalk.singaporemotherhoodcomforum application 3.6.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6662: Undefined Security Weakness

The Forum Krstarice aka com.tapatalk.forumkrstaricacom application 3.5.14 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6651: Undefined Security Weakness

The Planet of the Vapes Forum aka com.tapatalk.planetofthevapescoukforums application 3.7.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6655: Undefined Security Weakness

The Tortoise Forum aka org.tortoiseforum.android.forumrunner application 3.5.16 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-7348

Name of the Vulnerable Software and Affected Versions The SingaporeMotherhood Forum application version 3.6.6 Description The application does not verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted...

CVE-2014-6642

The Mark's Daily Apple Forum aka com.tapatalk.marksdailyapplecomforum application 2.4.9.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6643

The FIAT Forum aka com.tapatalk.fiatforumcom application 3.8.41 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The FIAT Forum aka com.tapatalk.fiatforumcom application 3.8.41 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6642

The Mark's Daily Apple Forum aka com.tapatalk.marksdailyapplecomforum application 2.4.9.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6643

The FIAT Forum aka com.tapatalk.fiatforumcom application 3.8.41 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6642

The CVE concerns the Android app for The Mark’s Daily Apple Forum (com.tapatalk.marksdailyapplecomforum) v2.4.9.3, where the implementation does not verify X.509 certificates from SSL servers. This lack of certificate verification enables man-in-the-middle attackers to spoof servers and exfiltrat...