EUVD-2014-7626

Malware in sbrugna...

CVE-2014-7755

The eTopUpOnline aka com.moremagic.etopup.client.android application 3.4.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7755

The eTopUpOnline aka com.moremagic.etopup.client.android application 3.4.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The eTopUpOnline aka com.moremagic.etopup.client.android application 3.4.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7755

The eTopUpOnline aka com.moremagic.etopup.client.android application 3.4.9 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7755

The CVE-2014-7755 entry concerns the Android app eTopUpOnline (com.moremagic.etopup.client.android) version 3.4.9, which does not verify X.509 certificates from SSL servers. This improperly implemented TLS validation enables man-in-the-middle attackers to spoof servers and obtain sensitive inform...