CVE-2014-7135: Undefined Security Weakness

The Ayuntamiento de Coana aka com.wInfoCoa application 0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7054: Undefined Security Weakness

The musica de barrios sonideros aka com.nobexinc.wls93155702.rc application 3.3.10 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-8068

CVE-2014-8068 affects Adobe Digital Editions 4.x. The issue is information disclosure: DE 4 does not encrypt data transmitted to adelogs.adobe.com, enabling network sniffing of sensitive information (e.g., book-navigation data). Affected platforms include Windows and macOS; older than 4.0.1 build...

CVE-2014-6928

The CVE-2014-6928 entry concerns the Rastreador de Celulares (com.mobincube.android.sc_9KTH8) Android app version 5.0.0 that does not verify X.509 certificates from SSL servers, enabling potential MITM disclosure of sensitive data via a crafted certificate. The connected documents confirm the aff...

CVE-2014-6928: Undefined Security Weakness

The Rastreador de Celulares aka com.mobincube.android.sc9KTH8 application 5.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-7604

Name of the Vulnerable Software and Affected Versions Rastreador de Celulares aka com.mobincube.android.sc 9KTH8 version 5.0.0 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify...

melin.sv-de Open Redirect vulnerability

Open Bug Bounty ID: OBB-50517 Description| Value ---|--- Affected Website:| melin.sv-de Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Remediation Guide:| OWASP Open Redirect Cheat Sheet Vulnerable...

CVE-2014-6720

The Pesca de Carpa Lite aka com.clearfishing.pescadecarpa.lite application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Pesca de Carpa Lite aka com.clearfishing.pescadecarpa.lite application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6720

The Pesca de Carpa Lite aka com.clearfishing.pescadecarpa.lite application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6720

The CVE-2014-6720 entry concerns the Android app Pesca de Carpa Lite (com.clearfishing.pescadecarpa.lite) version 1.0, which fails to verify X.509 certificates when connecting to SSL servers. This undermines TLS trust and enables man-in-the-middle attackers to spoof the SSL server and access sens...

PT-2014-7398

Name of the Vulnerable Software and Affected Versions Pesca de Carpa Lite version 1.0 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate because the application does not verify X.509 certificates from SSL servers...

CVE-2014-6720: Undefined Security Weakness

The Pesca de Carpa Lite aka com.clearfishing.pescadecarpa.lite application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6003

CVE-2014-6003 affects the Belas Frases de Amor (aka com.goodbarber.frasesdeamor) Android app 1. The vendor’s implementation does not verify X.509 certificates from SSL servers, enabling man‑in‑the‑middle attackers to spoof servers and obtain sensitive information via a crafted certificate. The av...

CVE-2014-6003: Undefined Security Weakness

The Belas Frases de Amor aka com.goodbarber.frasesdeamor application 1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

autos.brick7.de XSS vulnerability

Open Bug Bounty ID: OBB-49195 Description| Value ---|--- Affected Website:| autos.brick7.de Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

CVE-2014-5572

The Jazzpodium De Tor aka com.appmakr.app273713 application 206160 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Jazzpodium De Tor aka com.appmakr.app273713 application 206160 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5572

CVE-2014-5572 affects the Jazzpodium De Tor Android app (package com.appmakr.app273713, version 206160). The underlying issue is that the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted c...

PT-2014-6557

Name of the Vulnerable Software and Affected Versions com.appmakr.app273713 aka Jazzpodium De Tor version 206160 Description The application does not verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted...