EUVD-2014-5523

Malware in sbrugna...

EUVD-2014-1525

Malware in sbrugna...

XSS Vulnerability in Oceanis Cloud Browser

Oceanis Cloud Browser is a cross-platform cloud service browser with a dual-core engine developed by Maxthon. An XSS vulnerability exists in Oceanis Cloud Browser, which can be exploited by attackers to implant cross-site code and obtain sensitive information such as user cookies...

Maxthon Cloud Browser application Address Bar Spoofing Vulnerability

Maxthon is a versatile, personalized multi-tab browser based on the IE kernel. An address bar spoofing vulnerability exists in Maxthon Cloud Browser application versions prior to 4.1.6.2000, which allows remote attackers to spoof the address bar via JavaScript code crafted to use API history...

Design/Logic Flaw

The Maxthon Cloud Browser application before 4.1.6.2000 for Android allows remote attackers to spoof the address bar via crafted JavaScript code that uses the history API...

CVE-2014-1449

The Maxthon Cloud Browser application before 4.1.6.2000 for Android allows remote attackers to spoof the address bar via crafted JavaScript code that uses the history API...

CVE-2014-1449

The Maxthon Cloud Browser for Android (versions before 4.1.6.2000) is affected by an address bar spoofing vulnerability. Malicious JavaScript that uses the history API can cause the address bar to display a forged URL, enabling potential phishing-like deception. The defect is tied to the browser’...

CVE-2014-1449

The Maxthon Cloud Browser application before 4.1.6.2000 for Android allows remote attackers to spoof the address bar via crafted JavaScript code that uses the history API...

CVE-2014-5636

The Cloud Browser aka com.granitamalta.cloudbrowser application 2.2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Cloud Browser aka com.granitamalta.cloudbrowser application 2.2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5636

The Cloud Browser aka com.granitamalta.cloudbrowser application 2.2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5636

The CVE refers to CVE-2014-5636 affecting the Cloud Browser app (com.granitamalta.cloudbrowser) v2.2.1 for Android, where the application does not verify X.509 certificates from SSL servers. This behavior can enable man-in-the-middle attackers to spoof servers and obtain sensitive information via...