CVE-2014-4885

The CVE-2014-4885 entry concerns the CPWORLD Close Protection World Android app (com.tapatalk.closeprotectionworldcom) version 3.4.4. It is vulnerable because the app does not verify X.509 SSL certificates, enabling man-in-the-middle attackers to spoof servers and access sensitive information via...

CVE-2014-7799

The Squishy birds aka com.tatmob.squishybirds application 1.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7677

The CVE-2014-7677 entry concerns the Scudetto (com.scudetto) Android app version 2.7, which does not verify X.509 certificates when connecting to SSL servers. This lack of certificate validation enables man-in-the-middle attackers to spoof legitimate servers and obtain sensitive information via c...

CVE-2014-7643

The CVE-2014-7643 entry concerns the C.R. Group (aka com.c.r.group) Android application version 1.0, which does not verify X.509 certificates from SSL servers. This failure allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. The connecte...

CVE-2014-7757

The Awful Ninja Game aka com.absolutelyawfulapplications.awfulninjagame application 1.0.23 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7753

The Circa News aka cir.ca application 2.1.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7631

The Villa Antonia aka com.appbuilder.u7p5019 application 1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7721

The President Clicker aka com.flexymind.pclicker application 1.0.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7663

The CVE-2014-7663 entry describes a vulnerability in the Android application “The Right to the Nitty Gritty” (com.wGoNittyGritty) version 0.1, where the app does not verify X.509 certificates from SSL servers. This allows man-in-the-middle attackers to spoof servers and obtain sensitive informati...

Chinese Government Executes MITM Attack against iCloud

Apple iCloud users in China are not safe from the hackers — believed to be working for Chinese government — who are trying to wiretap Apple customers in the country. Great Fire, a reputed non-profit organization that monitors Internet censorship in China, claimed that the Chinese authorities have...

CVE-2014-7624

The Guess the Pixel Character Quiz aka com.aiadp.pixelcQuiz application 1.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7559

The InstaTalks aka com.natrobit.instatalks application 1.3.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7562

The Health Advocate SmartHelp aka com.healthadvocate.ui application 3.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7488

The Vineyard All In aka com.wVineyardAllIn application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Bodyguard for Hire aka com.dreamstep.wBodyGuardforHire application 0.18.13146.42280 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Kontan Kiosk aka com.appsfoundry.scoopwl.id.kontankiosk application @7F07025E for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7505

The CVE-2014-7505 entry concerns the AppTalk (com.chatatami.apptalk) Android app version 1.4.8, which does not verify X.509 SSL certificates. This allows MITM attackers to spoof servers and access sensitive information via a crafted certificate. The initial data indicates partial impact to confid...

CVE-2014-7559

CVE-2014-7559 affects the InstaTalks Android app (com.natrobit.instatalks) version 1.3.1. The root cause is failure to verify X.509 certificates from SSL servers, which can allow man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. The NVD recor...

CVE-2014-7555

The Apparound BLEND aka com.apparound.mobile.catalogo application 4.9.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7543

The Blood app (com.sheridan.ash) for Android, version 2.1, does not verify X.509 certificates from SSL servers, enabling MITM attackers to spoof servers and intercept sensitive information. Root cause: missing certificate validation. Impact: potential disclosure of sensitive data. Exploitation de...