CVE-2014-5736

The CVE-2014-5736 entry concerns the Android app Buy Coins (com.wBuyCoins) version 0.62.13364.24150. The vulnerability is that the app does not verify X.509 certificates when establishing TLS connections, allowing MITM attackers to spoof SSL servers and read sensitive information via a crafted ce...