EUVD-2014-5499

Malware in sbrugna...

search.gmarket.co.kr XSS vulnerability

Open Bug Bounty ID: OBB-666278 Description| Value ---|--- Affected Website:| search.gmarket.co.kr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...

CVE-2014-5612

The Gmarket aka com.ebay.kr.gmarket application 5.1.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Gmarket aka com.ebay.kr.gmarket application 5.1.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5612

The Gmarket aka com.ebay.kr.gmarket application 5.1.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5612

The CVE-2014-5612 entry concerns the Gmarket Android app (package com.ebay.kr.gmarket) version 5.1.3, which does not verify X.509 certificates from SSL servers. The root cause is missing certificate validation, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information...