Lucene search
K

7 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2023/06/22 6:51 p.m.3 views

Malicious code in flutter_appsflyer_sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 925db0740f51975e7310d7357f8e32c78cb9d96496fc52915d6eff365500204a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.8AI score
Exploits0References1
OSV
OSV
added 2023/06/22 6:51 p.m.8 views

MAL-2023-450 Malicious code in flutter_appsflyer_sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 925db0740f51975e7310d7357f8e32c78cb9d96496fc52915d6eff365500204a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References1
ThreatPost
ThreatPost
added 2020/01/28 6:16 p.m.62 views

Ring Doorbell App for Android Caught Sharing User Data with Facebook, Data-Miners

UPDATE Amazon’s Ring Doorbell app for Android is a nexus for data-harvesting, according to an investigation by the Electronic Frontier Foundation EFF. Privacy advocates allege Ring goes so far as to silently deliver updates on Ring customer usage to Facebook, even if the Ring owner doesn’t have a...

Exploits0References6
NVD
NVD
added 2014/09/09 1:55 a.m.6 views

CVE-2014-5528

The Appsflyer library for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.4CVSS5.9AI score0.00134EPSS
Exploits0References3
Prion
Prion
added 2014/09/09 1:55 a.m.16 views

Information disclosure

The Appsflyer library for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.4CVSS6.4AI score0.00134EPSS
Exploits0References3
Cvelist
Cvelist
added 2014/09/09 1:0 a.m.17 views

CVE-2014-5528

The Appsflyer library for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

5.9AI score0.00134EPSS
Exploits0References3
CVE
CVE
added 2014/09/09 1:0 a.m.37 views

CVE-2014-5528

The vulnerability CVE-2014-5528 affects the Appsflyer library for Android, which fails to verify X.509 certificates from SSL servers. This undermines TLS server authentication, enabling man‑in‑the‑middle attackers to spoof servers and access sensitive information via crafted certificates. Public ...

5.4CVSS6AI score0.00134EPSS
Exploits0References3Affected Software1
Rows per page
Query Builder