EUVD-2014-7566

Malware in sbrugna...

CVE-2014-7695

The easaa Baoneng aka com.easaa.baoneng application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7695

CVE-2014-7695 affects the Android app easaa Baoneng (com.easaa.baoneng) 1.0. The vulnerability is a failure to verify X.509 certificates from SSL servers, enabling a man-in-the-middle attacker to spoof servers and exfiltrate sensitive data via a crafted certificate. The connected sources confirm ...