CVE-2017-13105

CVE-2017-13105 affects the Android app “Hi Security Virus Cleaner – Antivirus, Booster” (version 3.7.1.1329). The connected documents state that the app accepts all SSL certificates during SSL communication, creating a MITM risk where encrypted traffic can be intercepted/read by an attacker. The ...

Android and iOS apps contain multiple vulnerabilities

Overview Android apps, including those pre-installed on some mobile devices, contain multiple vulnerabilities. All of these vulnerabilities were reported by Kryptowire. Vulnerabilities in pre-installed apps were presented at DEF CON 26 and a set of different vulnerabilities were previously...