EUVD-2014-7386

Malware in sbrugna...

EUVD-2014-7306

Malware in sbrugna...

EUVD-2014-7188

Malware in sbrugna...

CVE-2014-7515

The Bail Bonds aka com.onesolutionapps.chadlewisbailbondsandroid application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7515

The Bail Bonds aka com.onesolutionapps.chadlewisbailbondsandroid application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7515

The CVE-2014-7515 pertains to the Android app “Bail Bonds” (com.onesolutionapps.chadlewisbailbondsandroid) version 1.1, where the SSL/TLS implementation does not verify X.509 certificates. This allows a man-in-the-middle attacker to spoof servers and exfiltrate sensitive data via a crafted certif...

CVE-2014-7515: Undefined Security Weakness

The Bail Bonds aka com.onesolutionapps.chadlewisbailbondsandroid application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7435

The AJD Bail Bonds aka com.onesolutionapps.ajdbailbondsandroid application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7317

The Aloha Bail Bonds aka com.onesolutionapps.alohabailbondsandroid application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Aloha Bail Bonds aka com.onesolutionapps.alohabailbondsandroid application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The AJD Bail Bonds aka com.onesolutionapps.ajdbailbondsandroid application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7435

The AJD Bail Bonds aka com.onesolutionapps.ajdbailbondsandroid application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7435

The CVE entry CVE-2014-7435 concerns the Android app AJD Bail Bonds (com.onesolutionapps.ajdbailbondsandroid) version 1.1. The issue is that the app does not verify X.509 certificates from SSL servers, enabling MITM attackers to spoof servers and obtain sensitive information via a crafted certifi...

CVE-2014-7317

The CVE-2014-7317 entry concerns the Android app Aloha Bail Bonds (com.onesolutionapps.alohabailbondsandroid) version 1.1, which does not verify X.509 certificates from SSL servers. The underlying issue is a failure in TLS certificate validation that enables man-in-the-middle attackers to spoof s...

CVE-2014-7317

The Aloha Bail Bonds aka com.onesolutionapps.alohabailbondsandroid application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7435: Undefined Security Weakness

The AJD Bail Bonds aka com.onesolutionapps.ajdbailbondsandroid application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7317: Undefined Security Weakness

The Aloha Bail Bonds aka com.onesolutionapps.alohabailbondsandroid application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...