Information disclosure

The Bouncy Bill World-Cup aka mominis.GenericAndroid.BouncyBillWorldCup application 1.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Bouncy Bill aka mominis.GenericAndroid.BouncyBill application 1.9.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Bouncy Bill Halloween aka mominis.GenericAndroid.BouncyBillHalloween application 1.0.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5780

The Bouncy Bill aka mominis.GenericAndroid.BouncyBill application 1.9.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5783

The CVE-2014-5783 entry concerns the Android app “Bouncy Bill Monster Smasher ed” (version 1.0.3). The underlying issue is that the app does not verify X.509 certificates when connecting to SSL servers, enabling MITM attackers to spoof servers and access sensitive information via a crafted certif...

CVE-2014-5784

The Bouncy Bill Seasons aka mominis.GenericAndroid.BouncyBillSeasons application 1.3.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5785

The Bouncy Bill World-Cup aka mominis.GenericAndroid.BouncyBillWorldCup application 1.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5781

CVE-2014-5781 affects the Android app The Bouncy Bill Easter Tales (1.0.4). It does not verify X.509 certificates when connecting to SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via crafted certificates. CVSS v2 metrics indicate a MEDIUM base...

CVE-2014-5780

CVE-2014-5780 affects the Android app Bouncy Bill (aka mominis.Generic_Android.Bouncy_Bill) version 1.9.1. The vulnerability is that the application does not verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information via a cr...

CVE-2014-5782

CVE-2014-5782 affects the Android app “Bouncy Bill Halloween” (aka mominis.Generic_Android.Bouncy_Bill_Halloween), version 1.0.3. The issue is that the application does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive i...

CVE-2014-5784

CVE-2014-5784 affects the Bouncy Bill Seasons Android app (version 1.3.9). The issue is that the app does not verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. The documented impact is info...

CVE-2014-5782

The Bouncy Bill Halloween aka mominis.GenericAndroid.BouncyBillHalloween application 1.0.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5781

The Bouncy Bill Easter Tales aka mominis.GenericAndroid.BouncyBillEasterTales application 1.0.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5783

The Bouncy Bill Monster Smasher ed aka mominis.GenericAndroid.BouncyBillMonsterSmasherEdition application 1.0.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Threat Outbreak Alert RuleID11181: Email Messages Distributing Malicious Software on August 19, 2014

Medium Alert ID: 35343 First Published: 2014 August 19 15:54 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11181 may contain the following files: Name |...

Judiciary Committee Approves Bill Limiting NSA Surveillance

The House Judiciary Committee met yesterday in a hearing to discuss, amend and approve the USA FREEDOM Act, which aims to rein in the National Security Agency’s surveillance powers and place new limits on authority granted under the USA PATRIOT Act and the Foreign Intelligence Surveillance Act...

Threat Outbreak Alert: Fake Bill Invoice Email Messages on May 3, 2014

Medium Alert ID: 34098 First Published: 2014 May 5 12:28 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a bill invoice for the recipient. The email message attempts to convince the recipient to open the attachment and...

Threat Outbreak Alert: Fake Bill Payment Notification Email Messages on May 1, 2014

Medium Alert ID: 34034 First Published: 2014 May 2 14:13 GMT Version: 1 Summary Cisco Security has detected significant activity related to German-language spam email messages that claim to contain a bill payment notification for the recipient. The text in the email message attempts to convince t...

White House Proposal Would End NSA Metadata Program

Privacy advocates are cautiously applauding the reports that the Obama administration will unveil a legislative proposal to end the National Security Agency’s collection of Americans’ bulk phone records, but are concerned what the fine print on that proposal might hold. “Given all the various way...

Threat Outbreak Alert: Fake Overdue Bill Notice Email Messages on March 5, 2014

Medium Alert ID: 33198 First Published: 2014 March 5 19:13 GMT Last Updated: 2014 March 6 15:10 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an overdue payment notification for the recipient. The text in the email...