EUVD-2014-8375

Malware in sbrugna...

CVE-2014-8538

The Hijab Modern aka com.Aisyaidea.HijabModern application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Hijab Modern aka com.Aisyaidea.HijabModern application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-8538

The Hijab Modern aka com.Aisyaidea.HijabModern application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-8538

CVE-2014-8538 affects the Hijab Modern Android app (com.Aisyaidea.HijabModern) version 1.0, which does not verify X.509 certificates when establishing SSL connections. Root cause is missing certificate validation, enabling MITM attackers to spoof servers and access sensitive data via crafted cert...