EUVD-2014-5582

Malware in sbrugna...

Hello Kitty Cafe - Customized SSL, Dangerous filesystem permissions, Hardcoded secrets vulnerabilities

HackApp vulnerability scanner discovered that application Hello Kitty Cafe published at the 'play' market has multiple vulnerabilities...

CVE-2014-5695

The Hello Kitty Cafe aka com.sd.google.helloKittyCafe application 1.4.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Hello Kitty Cafe aka com.sd.google.helloKittyCafe application 1.4.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5695

The Hello Kitty Cafe aka com.sd.google.helloKittyCafe application 1.4.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5695

The CVE-2014-5695 entry affects the Android app Hello Kitty Cafe (com.sd.google.helloKittyCafe) version 1.4.0, where SSL certificate verification is not performed for servers. This allows a man-in-the-middle to spoof servers and capture sensitive information via a crafted certificate. The core ca...

CVE-2014-5695: Undefined Security Weakness

The Hello Kitty Cafe aka com.sd.google.helloKittyCafe application 1.4.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...