Marcus Hutchins (MalwareTech) Gets $30,000 Bail, But Can't Leave United States

Marcus Hutchins, the malware analyst who helped stop global Wannacry menace, has reportedly pleaded not guilty to charges of creating and distributing the infamous Kronos banking malware and is set to release on $30,000 bail on Monday. Hutchins, the 23-year-old who operates under the alias...

Kim Dotcom loses Fight Against Extradition to the US

Internet millionaire and Megaupload founder Kim Dotcom and his three associates are eligible for extradition to the US to face criminal charges over massive copyright infringement on Megaupload now-shuttered, the court has ruled citing "overwhelming" evidence. On Tuesday afternoon, New Zealand...

CVE-2014-7803

The Woodward Bail aka com.onesolutionapps.woodwardbailandroid application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7734

The Reds Anytime Bail aka com.onesolutionapps.redsanytimebailandroid application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The AAAA Discount Bail aka com.onesolutionapps.aaaadiscountbailandroid application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Woodward Bail aka com.onesolutionapps.woodwardbailandroid application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7734

The Reds Anytime Bail aka com.onesolutionapps.redsanytimebailandroid application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7785

The AAAA Discount Bail aka com.onesolutionapps.aaaadiscountbailandroid application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7803

The Woodward Bail aka com.onesolutionapps.woodwardbailandroid application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7803

CVE-2014-7803 affects the Android app Woodward Bail (com.onesolutionapps.woodwardbailandroid), version 1.1, where TLS X.509 certificate validation is not performed. This enables MITM attackers to spoof SSL servers and exfiltrate sensitive data via a crafted certificate (base CVSS v2 score 5.4).

CVE-2014-7734

The Reds Anytime Bail aka com.onesolutionapps.redsanytimebailandroid application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7785

CVE-2014-7785 affects the Android app “AAAA Discount Bail” (com.onesolutionapps.aaaadiscountbailandroid) version 1.1. The issue is failure to verify X.509 certificates when connecting to SSL servers, enabling man‑in‑the‑middle attackers to spoof servers and extract sensitive information via a cra...

CVE-2014-7734

The CVE-2014-7734 entry concerns the Android app Reds Anytime Bail (com.onesolutionapps.redsanytimebailandroid) version 1.1, which does not verify X.509 certificates from SSL servers. This weakens TLS/SSL, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information via ...

CVE-2014-7803: Undefined Security Weakness

The Woodward Bail aka com.onesolutionapps.woodwardbailandroid application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-8222

Name of the Vulnerable Software and Affected Versions The Reds Anytime Bail application version 1.1 Description The issue concerns the application's failure to verify X.509 certificates from SSL servers. This allows man-in-the-middle attackers to spoof servers and obtain sensitive information via...

PT-2014-8270

Name of the Vulnerable Software and Affected Versions AAAA Discount Bail aka com.onesolutionapps.aaaadiscountbailandroid version 1.1 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not...

PT-2014-8285

Name of the Vulnerable Software and Affected Versions com.onesolutionapps.woodwardbailandroid version 1.1 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate because the application does not verify X.509 certificates...

CVE-2014-7734: Undefined Security Weakness

The Reds Anytime Bail aka com.onesolutionapps.redsanytimebailandroid application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7785: Undefined Security Weakness

The AAAA Discount Bail aka com.onesolutionapps.aaaadiscountbailandroid application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7515

The Bail Bonds aka com.onesolutionapps.chadlewisbailbondsandroid application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...