EUVD-2014-7352

Malware in sbrugna...

CVE-2014-7481

The ETG Hosting aka com.etg.web.hosting application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The ETG Hosting aka com.etg.web.hosting application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7481

The ETG Hosting aka com.etg.web.hosting application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7481

The CVE-2014-7481 entry concerns the Android app ETG Hosting (com.etg.web.hosting) version 2.0 that does not verify X.509 certificates from SSL servers. The underlying issue is a lack of proper certificate validation, enabling a man-in-the-middle to spoof servers and exfiltrate sensitive informat...