EUVD-2014-6638

Malware in sbrugna...

CVE-2014-6760

The Harem Thief Dating aka com.haremthief.haremthief application 1.2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Hardcoded credentials

The Harem Thief Dating aka com.haremthief.haremthief application 1.2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6760

The Harem Thief Dating aka com.haremthief.haremthief application 1.2.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6760

The CVE-2014-6760 entry concerns the Android app Harem Thief Dating (com.haremthief.haremthief) , version 1.2.1. The root cause is that the app does not verify X.509 SSL certificates when connecting to servers, enabling man-in-the-middle (MITM) attacks to spoof servers and access sensitive inform...