CVE-2014-6998

The PinkFong TV Android app (package kr.co.smartstudy.pinkfongtv_android_googlemarket, version 4) does not verify X.509 certificates from SSL servers, enabling MITM attackers to spoof servers and obtain sensitive information via a crafted certificate. The root cause is improper certificate valida...

Information disclosure

The Campus Link - Campus TV HKUSU aka com.campus.tv.hkusu application 2.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6783

The Campus Link - Campus TV HKUSU aka com.campus.tv.hkusu application 2.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6783

The Campus Link - Campus TV HKUSU Android app (package com.campus.tv.hkusu, version 2.2) does not verify X.509 certificates from SSL servers, allowing a man-in-the-middle attacker to spoof servers and obtain sensitive information via a crafted certificate. The CVSS notes partial impact to confide...

Home Hacking Made Simple

SEATTLE–Like most security researchers, David Jacoby is naturally curious about how things work, and whether they can be made to do things they weren’t meant to do. Sitting at home in Sweden a few months ago, he looked at all of the Web-enabled devices in his house–TV, game console, network stora...

David Jacoby on Hacking His Home

Dennis Fisher talks with David Jacoby of Kaspersky Lab about the research he did on the security of electronics gear in his home, including his smart TV, game console and storage devices, and what the vendors need to do to respond.​ Download: digitalunderground168.mp3 Music by Chris Gonsalves...

Apple TV < 7 Multiple Vulnerabilities

According to its banner, the remote Apple TV device is a version prior to 7. It is, therefore, affected by multiple vulnerabilities, the most serious of which can result in arbitrary code execution. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid77822;...

CVE-2014-6671

The World Cup 2014 Brazil - Xem TV aka vn.letshare.football.worldcup application 2.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6665

The Ahmed Bukhatir Nasheeds TV aka com.wAhmedBukhatirApp application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6671

The World Cup 2014 Brazil - Xem TV aka vn.letshare.football.worldcup application 2.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6671

The CVE-2014-6671 entry concerns the World Cup 2014 Brazil app - Xem TV (vn.letshare.football.worldcup), version 2.6 for Android. The vulnerability is that the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and access sensitive infor...

CVE-2014-6665

CVE-2014-6665 affects the Android app “Ahmed Bukhatir Nasheeds TV” (com.wAhmedBukhatirApp) v1.0. The root cause is that the app does not validate SSL X.509 certificates when establishing TLS connections, enabling MITM attackers to spoof servers and exfiltrate or modify sensitive information. The ...

Apple TV multiple security vulnerabilities

Weak authentication, unauthorized access, information leakage, race conditions, protection bypass, memory corruptions on different formats parsing...

CVE-2014-5979

The TV Bengali Open Directory aka com.TVBengali application 1.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Open redirect

The TV Bengali Open Directory aka com.TVBengali application 1.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5979

CVE-2014-5979 affects the TV Bengali Open Directory (com.TVBengali) Android app version 1.4. The vulnerability is that the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. The...

CVE-2014-5979

The TV Bengali Open Directory aka com.TVBengali application 1.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Apple TV < 7 Multiple Vulnerabilities

Binary data 8392.prm...

CVE-2014-4411

WebKit, as used in Apple iOS before 8 and Apple TV before 7, allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2014-09-17-1 and...

CVE-2014-4420

The network-statistics interface in the kernel in Apple iOS before 8 and Apple TV before 7 does not properly initialize memory, which allows attackers to obtain sensitive memory-content and memory-layout information via a crafted application, a different vulnerability than CVE-2014-4371,...