EUVD-2014-5776

Malware in sbrugna...

Design/Logic Flaw

The Android Forums aka com.tapatalk.androidforumscom application 2.4.4.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5889: Undefined Security Weakness

The Android Forums aka com.tapatalk.androidforumscom application 2.4.4.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-6874

Name of the Vulnerable Software and Affected Versions Android Forums aka com.tapatalk.androidforumscom version 2.4.4.9 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509...

Android Forums hacked, User Credentials Stolen

Phandroid's Android Forums Web site is hacked and user account details stolen, according to a notice posted online. The data includes the user names, e-mail addresses, hashed passwords, and registration IP addresses of the forums' more than 1 million users. If you are one of them, you should chan...