EUVD-2014-5772

Malware in sbrugna...

Disaster Alert - Customized SSL, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Disaster Alert published at the 'play' market has multiple vulnerabilities...

CVE-2014-5885

The Disaster Alert aka disasterAlert.PDC application 3.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Disaster Alert aka disasterAlert.PDC application 3.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5885

The Disaster Alert aka disasterAlert.PDC application 3.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5885

The CVE-2014-5885 entry concerns the Disaster Alert (disasterAlert.PDC) Android app, version 3.2. It is affected because the application does not verify X.509 certificates from SSL servers, causing a certificate validation bypass. This allows potential man-in-the-middle attackers to spoof servers...