EUVD-2014-6524

Malware in sbrugna...

CVE-2014-6646

The vulnerability CVE-2014-6646 affects the bellyhoodcom Android app (package com.tapatalk.bellyhoodcom) version 3.4.23, which does not verify X.509 certificates from SSL servers. This insecure TLS handling enables man-in-the-middle attackers to spoof legitimate servers and extract sensitive info...

CVE-2014-6646

The bellyhoodcom aka com.tapatalk.bellyhoodcom application 3.4.23 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...