EUVD-2014-5427

Malware in sbrugna...

CVE-2014-5540

The Flick a Trade aka air.com.cygnecode.fat application 3.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Flick a Trade aka air.com.cygnecode.fat application 3.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5540

The CVE-2014-5540 entry concerns the Flick a Trade Android app (version 3.3) failing to verify X.509 certificates from SSL servers, enabling MITM attackers to spoof servers and access sensitive data via a crafted certificate. The connected documents confirm the flaw but do not provide any concret...

CVE-2014-5540

The Flick a Trade aka air.com.cygnecode.fat application 3.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5540: Undefined Security Weakness

The Flick a Trade aka air.com.cygnecode.fat application 3.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-6525

Name of the Vulnerable Software and Affected Versions The Flick a Trade aka air.com.cygnecode.fat version 3.3 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509 certificates...