EUVD-2014-5471

Malware in sbrugna...

The Not-so-True People-Search Network from China

Its not unusual for the data brokers behind people-search websites to use pseudonyms in their day-to-day lives you would, too. Some of these personal data purveyors even try to reinvent their online identities in a bid to hide their conflicts of interest. But its not every day you run across a...

Design/Logic Flaw

The Background Check BeenVerified aka com.beenverified.android application 4.01.67 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5584

The CVE-2014-5584 entry concerns the Android app BeenVerified (com.beenverified.android) version 4.01.67, where SSL servers are not validating X.509 certificates. This allows a man-in-the-middle to spoof servers and access sensitive data via a crafted certificate. The issue is tied to the app’s T...