EUVD-2014-5735

Malware in sbrugna...

MPC Dubstep Hero - Customized SSL, Dynamic Code Loading, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application MPC Dubstep Hero published at the 'play' market has multiple vulnerabilities...

CVE-2014-5848

The Dubstep Hero aka com.electricpunch.dubstephero application 1.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Dubstep Hero aka com.electricpunch.dubstephero application 1.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5848

CVE-2014-5848 affects the Dubstep Hero Android app (com.electricpunch.dubstephero) version 1.9. The issue is failure to verify X.509 certificates when establishing SSL connections, which allows a man-in-the-middle to spoof servers and potentially exfiltrate sensitive data via a crafted certificat...

CVE-2014-5848

The Dubstep Hero aka com.electricpunch.dubstephero application 1.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...