Design/Logic Flaw

The Taster Magazine aka com.magazinecloner.taster application @7F080183 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7728

The Logan Banner aka com.soln.S8B5C1F53B8CBE06D5DE0A0E7E23DCDA7 application 1.0010.b0010 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7707

The Outdoor Design And Living aka com.pocketmagsau.outdoordesignandliving application @7F080181 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Pakistan Cricket News aka com.conduit.appcf18df8bdf454eb0a836e2d29886bc40.app application 1.21.38.6504 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7735

The Dr. Sheikh Adnan Ibrahim aka com.amitaff.adnanIbrahim application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The India Today Telugu aka com.magzter.indiatoday.telugu application 3.02 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Terrorizer Magazine aka com.triactivemedia.terrorizer application @7F08017A for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Rally Albania Live 2014 aka com.wRallyAlbaniaLIVE2014 application 0.11 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Golosinas Simpson1 aka com.wGolosinasSimpson1 application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7721

The President Clicker aka com.flexymind.pclicker application 1.0.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7741

The Healing Bookstore aka com.wHealingBookstore application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7630

The Fling Gold aka com.mbgames.fling.gold application 1.1.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7751

The Recetas de Tragos aka com.wRecetasdeTragos application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7742

The Noticias del Vaticano aka com.wNoticiasdelVaticano application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7778

The Epc World aka com.magzter.epcworld application 3.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7656

The CVE-2014-7656 entry pertains to the Android app Indian Management (package com.magzter.indianmanagement) version 3.0, which does not verify X.509 certificates when connecting to SSL servers. This flaw enables man-in-the-middle attackers to spoof legitimate servers and exfiltrate sensitive inf...

CVE-2014-4890

CVE-2014-4890 affects the Android app Nano Digest (com.magzter.nanodigest) v3.0. The root cause is failure to verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and access sensitive data via a crafted certificate. Public sources (NVD and related reco...

CVE-2014-7763

The Listen up! mirucho aka jp.ameba.kiiteyo.android application 1.1.8 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7750

The Taster Magazine aka com.magazinecloner.taster application @7F080183 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-4892

The uControl Smart Home Automation aka de.ucontrol application 1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...