EUVD-2014-7586

Malware in sbrugna...

CVE-2014-7715

The GIGA HOBBY aka com.innopage.store.gigahobby application 1.0.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7715

The GIGA HOBBY aka com.innopage.store.gigahobby application 1.0.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The GIGA HOBBY aka com.innopage.store.gigahobby application 1.0.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7715

The GIGA HOBBY aka com.innopage.store.gigahobby application 1.0.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7715

The CVE-2014-7715 entry concerns the Android application GIGA HOBBY (package com.innopage.store.gigahobby) version 1.0.6. Affected component: SSL/TLS certificate validation in the app’s network trust configuration is absent: the app does not verify X.509 certificates from SSL servers. Root cause:...

PT-2014-8206

Name of the Vulnerable Software and Affected Versions GIGA HOBBY aka com.innopage.store.gigahobby version 1.0.6 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509 certificat...

CVE-2014-7715: Undefined Security Weakness

The GIGA HOBBY aka com.innopage.store.gigahobby application 1.0.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...