EUVD-2014-6854

Malware in sbrugna...

Aeroexpress - Dynamic Code Loading, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Aeroexpress published at the 'play' market has multiple vulnerabilities...

CVE-2014-6976

The Aeroexpress aka ru.lynx.aero application 2.6.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Aeroexpress aka ru.lynx.aero application 2.6.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6976

CVE-2014-6976 affects the Android app Aeroexpress (aka ru.lynx.aero) version 2.6.2. The root cause is that the application does not verify X.509 certificates from SSL servers, allowing MITM attackers to spoof servers and obtain sensitive information via a crafted certificate. The vulnerability im...

CVE-2014-6976

The Aeroexpress aka ru.lynx.aero application 2.6.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-7652

Name of the Vulnerable Software and Affected Versions Aeroexpress aka ru.lynx.aero version 2.6.2 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509 certificates from SSL...

CVE-2014-6976: Undefined Security Weakness

The Aeroexpress aka ru.lynx.aero application 2.6.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...