EUVD-2014-5623

Malware in sbrugna...

CVE-2014-5736

The Buy Coins aka com.wBuyCoins application 0.62.13364.24150 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Buy Coins aka com.wBuyCoins application 0.62.13364.24150 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5736

The CVE-2014-5736 entry concerns the Android app Buy Coins (com.wBuyCoins) version 0.62.13364.24150. The vulnerability is that the app does not verify X.509 certificates when establishing TLS connections, allowing MITM attackers to spoof SSL servers and read sensitive information via a crafted ce...

CVE-2014-5736

The Buy Coins aka com.wBuyCoins application 0.62.13364.24150 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...