EUVD-2014-5888

Malware in sbrugna...

CVE-2014-6000

The FreshDirect aka com.freshdirect.android application 2.7.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The FreshDirect aka com.freshdirect.android application 2.7.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6000

CVE-2014-6000 affects the FreshDirect Android app (com.freshdirect.android) 2.7.1. The issue is that the app does not verify X.509 certificates from SSL servers, allowing MITM attackers to spoof servers and obtain sensitive information via a crafted certificate. Root cause: missing certificate va...

CVE-2014-6000

The FreshDirect aka com.freshdirect.android application 2.7.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6000: Undefined Security Weakness

The FreshDirect aka com.freshdirect.android application 2.7.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-6985

Name of the Vulnerable Software and Affected Versions FreshDirect application version 2.7.1 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate because the application does not verify X.509 certificates from SSL...