EUVD-2014-5457

Malware in sbrugna...

CVE-2014-5570

The DailyFinance - Stocks & News aka com.aol.mobile.dailyFinance application 2.0.2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The DailyFinance - Stocks & News aka com.aol.mobile.dailyFinance application 2.0.2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5570

The DailyFinance - Stocks & News aka com.aol.mobile.dailyFinance application 2.0.2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5570

The CVE-2014-5570 entry concerns the Android app DailyFinance – Stocks & News (com.aol.mobile.dailyFinance) version 2.0.2.1 that fails to verify X.509 certificates from SSL servers. The underlying issue is missing certificate verification in TLS, which enables man-in-the-middle attackers to spoof...