EUVD-2014-6525

Malware in sbrugna...

CVE-2014-6647

The CVE-2014-6647 entry concerns the ElForro.com Android application (package com.tapatalk.elforrocom) version 2.4.3.10. The issue is improper SSL certificate validation: the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and extract...