EUVD-2014-5636

Malware in sbrugna...

Jelly Splash - BSD license, Base64 encoded String, Customized SSL vulnerabilities

HackApp vulnerability scanner discovered that application Jelly Splash published at the 'play' market has multiple vulnerabilities...

CVE-2014-5749

The Jelly Splash aka com.wooga.jellysplash application 1.11.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Jelly Splash aka com.wooga.jellysplash application 1.11.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5749

The Jelly Splash aka com.wooga.jellysplash application 1.11.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5749

The CVE-2014-5749 entry concerns the Jelly Splash (com.wooga.jelly_splash) Android app running version 1.11.3. The vulnerability is due to the app not verifying X.509 certificates from SSL servers, enabling man‑in‑the‑middle attackers to spoof servers and access sensitive information via a crafte...

CVE-2014-5749: Undefined Security Weakness

The Jelly Splash aka com.wooga.jellysplash application 1.11.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...