EUVD-2014-5738

Malware in sbrugna...

Dark Summoner - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Dark Summoner published at the 'play' market has multiple vulnerabilities...

CVE-2014-5851

The Dark Summoner aka com.darksummoner application 1.03.39 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Dark Summoner aka com.darksummoner application 1.03.39 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5851

The Dark Summoner aka com.darksummoner application 1.03.39 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5851

The CVE-2014-5851 entry concerns The Dark Summoner Android app (package com.darksummoner) version 1.03.39, where SSL/TLS connections do not verify X.509 certificates. This allows a man-in-the-middle attacker to spoof servers and exfiltrate sensitive data via a crafted certificate. The referenced ...

PT-2014-6836

Name of the Vulnerable Software and Affected Versions The Dark Summoner aka com.darksummoner application version 1.03.39 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509...

CVE-2014-5851: Undefined Security Weakness

The Dark Summoner aka com.darksummoner application 1.03.39 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...