8 matches found
EUVD-2014-7626
Malware in sbrugna...
CVE-2014-7755
The eTopUpOnline aka com.moremagic.etopup.client.android application 3.4.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Information disclosure
The eTopUpOnline aka com.moremagic.etopup.client.android application 3.4.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-7755
The eTopUpOnline aka com.moremagic.etopup.client.android application 3.4.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-7755
The CVE-2014-7755 entry concerns the Android app eTopUpOnline (com.moremagic.etopup.client.android) version 3.4.9, which does not verify X.509 certificates from SSL servers. This improperly implemented TLS validation enables man-in-the-middle attackers to spoof servers and obtain sensitive inform...
CVE-2014-7755
The eTopUpOnline aka com.moremagic.etopup.client.android application 3.4.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
PT-2014-8240
Name of the Vulnerable Software and Affected Versions eTopUpOnline aka com.moremagic.etopup.client.android version 3.4.9 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509...
CVE-2014-7755: Undefined Security Weakness
The eTopUpOnline aka com.moremagic.etopup.client.android application 3.4.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...