EUVD-2018-17105

Malware in sbrugna...

EUVD-2014-5542

Malware in sbrugna...

CVE-2018-5326

Cheetah Mobile CM Browser 5.22.06.0012, when installed on unspecified "older" Android platforms, allows Same Origin Policy Bypass...

Code injection

Cheetah Mobile CM Browser 5.22.06.0012, when installed on unspecified "older" Android platforms, allows Same Origin Policy Bypass...

CVE-2018-5326

CVE-2018-5326 affects Cheetah Mobile CM Browser 5.22.06.0012 on older Android platforms, described as a Same Origin Policy bypass . External documents confirm the vulnerability exists in this specific version, enabling cross-origin policy circumvention. The CVSS data provided indicates a network-...

CVE-2018-5326: Undefined Security Weakness

Cheetah Mobile CM Browser 5.22.06.0012, when installed on unspecified "older" Android platforms, allows Same Origin Policy Bypass...

PT-2018-16895

Name of the Vulnerable Software and Affected Versions Cheetah Mobile CM Browser version 5.22.06.0012 Description The issue allows for Same Origin Policy Bypass when Cheetah Mobile CM Browser is installed on older Android platforms. Recommendations For version 5.22.06.0012, consider updating to a...

CM Browser - Fast & Light - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application CM Browser - Fast & Light published at the 'play' market has multiple vulnerabilities...

CM Browser SOP Bypass

Vulnerability: CM Browser Same Origin Policy Bypass Impact: High/Critical Authors: Rafay Baloch Company: RHAinfoSEC Website: http://rhainfosec.com & http://rafayhackingarticles.net Introduction Same Origin Policy SOP is one of the most important security mechanisms that are applied in modern...

CVE-2014-5655

The CM Browser - Fast & Secure aka com.ksmobile.cb application 5.0.50 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Input validation

The CM Browser - Fast & Secure aka com.ksmobile.cb application 5.0.50 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5655

The CM Browser - Fast & Secure aka com.ksmobile.cb application 5.0.50 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5655

CM Browser - Fast & Secure (com.ksmobile.cb) for Android 5.0.50 does not verify X.509 certificates from SSL servers, enabling MITM via crafted certificates. Root cause: lack of server certificate verification in SSL/TLS validation. Impact: potential exposure of sensitive information. Exploitation...

PT-2014-6640

Name of the Vulnerable Software and Affected Versions CM Browser - Fast & Secure aka com.ksmobile.cb version 5.0.50 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509...

CVE-2014-5655: Undefined Security Weakness

The CM Browser - Fast & Secure aka com.ksmobile.cb application 5.0.50 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...