EUVD-2014-6668

Malware in sbrugna...

CVE-2014-6790

The INVEX aka com.mobilatolye.keyinternet application 1.0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The INVEX aka com.mobilatolye.keyinternet application 1.0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6790

The INVEX aka com.mobilatolye.keyinternet application 1.0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6790

The CVE-2014-6790 entry involves the INVEX (com.mobilatolye.keyinternet) Android application 1.0.2, which does not verify X.509 certificates from SSL servers. This directly allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. The availabl...