EUVD-2014-5623

Malware in sbrugna...

CVE-2014-5736

The Buy Coins aka com.wBuyCoins application 0.62.13364.24150 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Buy Coins aka com.wBuyCoins application 0.62.13364.24150 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5736

The Buy Coins aka com.wBuyCoins application 0.62.13364.24150 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5736

The CVE-2014-5736 entry concerns the Android app Buy Coins (com.wBuyCoins) version 0.62.13364.24150. The vulnerability is that the app does not verify X.509 certificates when establishing TLS connections, allowing MITM attackers to spoof SSL servers and read sensitive information via a crafted ce...

PT-2014-6721

Name of the Vulnerable Software and Affected Versions Buy Coins aka com.wBuyCoins application version 0.62.13364.24150 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509...

CVE-2014-5736: Undefined Security Weakness

The Buy Coins aka com.wBuyCoins application 0.62.13364.24150 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...