EUVD-2014-5852

Malware in sbrugna...

CVE-2014-5965

The GrooveMusic aka com.mobincube.android.sc2HKFF application 2.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The GrooveMusic aka com.mobincube.android.sc2HKFF application 2.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5965

CVE-2014-5965 affects the GrooveMusic app (com.mobincube.android.sc_2HKFF) version 2.0.0 on Android. The root cause is that the app does not verify X.509 certificates when establishing SSL/TLS connections, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via ...

CVE-2014-5965

The GrooveMusic aka com.mobincube.android.sc2HKFF application 2.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...