EUVD-2014-6640

Malware in sbrugna...

CVE-2014-6762

The bongomovie aka com.mbwasi.bongomovie application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The bongomovie aka com.mbwasi.bongomovie application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6762

The CVE-2014-6762 entry describes a vulnerability in the Android application Bongomovie (package com.mbwasi.bongomovie) version 1.0, where SSL/TLS certificate validation is not performed. This allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certi...

CVE-2014-6762

The bongomovie aka com.mbwasi.bongomovie application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...