EUVD-2014-5852

Malware in sbrugna...

CVE-2014-5965

The GrooveMusic aka com.mobincube.android.sc2HKFF application 2.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The GrooveMusic aka com.mobincube.android.sc2HKFF application 2.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5965

The GrooveMusic aka com.mobincube.android.sc2HKFF application 2.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5965

CVE-2014-5965 affects the GrooveMusic app (com.mobincube.android.sc_2HKFF) version 2.0.0 on Android. The root cause is that the app does not verify X.509 certificates when establishing SSL/TLS connections, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via ...

PT-2014-6950

Name of the Vulnerable Software and Affected Versions GrooveMusic aka com.mobincube.android.sc 2HKFF version 2.0.0 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509...

CVE-2014-5965: Undefined Security Weakness

The GrooveMusic aka com.mobincube.android.sc2HKFF application 2.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...