EUVD-2014-6963

Malware in sbrugna...

CVE-2014-7084

The Hesheng 80 aka com.ireadercity.c29 application 3.0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Hesheng 80 aka com.ireadercity.c29 application 3.0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7084

The CVE-2014-7084 entry concerns the Android app Hesheng 80 (package com.ireadercity.c29), version 3.0.2, which does not verify X.509 certificates from SSL servers. Root cause: TLS/SSL certificate verification is bypassed, enabling a man-in-the-middle to spoof servers and leak sensitive informati...

CVE-2014-7084

The Hesheng 80 aka com.ireadercity.c29 application 3.0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7084: Undefined Security Weakness

The Hesheng 80 aka com.ireadercity.c29 application 3.0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-7756

Name of the Vulnerable Software and Affected Versions Hesheng 80 aka com.ireadercity.c29 version 3.0.2 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate because the application does not verify X.509 certificates fr...