CVE-2014-5963

The CVE-2014-5963 entry concerns the Halieutics Android app (com.corn.Halieutics), version 21.40.5, where X.509 certificate validation is not performed when connecting to SSL servers. This enables man‑in‑the‑middle attackers to spoof servers and exfiltrate sensitive information via a crafted cert...