EUVD-2014-6638

Malware in sbrugna...

CVE-2014-6760

The Harem Thief Dating aka com.haremthief.haremthief application 1.2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Hardcoded credentials

The Harem Thief Dating aka com.haremthief.haremthief application 1.2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6760

The Harem Thief Dating aka com.haremthief.haremthief application 1.2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6760

The CVE-2014-6760 entry concerns the Android app Harem Thief Dating (com.haremthief.haremthief) , version 1.2.1. The root cause is that the app does not verify X.509 SSL certificates when connecting to servers, enabling man-in-the-middle (MITM) attacks to spoof servers and access sensitive inform...

PT-2014-7438

Name of the Vulnerable Software and Affected Versions The Harem Thief Dating application version 1.2.1 Description The issue concerns the application's failure to verify X.509 certificates from SSL servers. This oversight allows man-in-the-middle attackers to spoof servers and obtain sensitive...

CVE-2014-6760: Undefined Security Weakness

The Harem Thief Dating aka com.haremthief.haremthief application 1.2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...