EUVD-2014-5565

Malware in sbrugna...

Best IQ Test - Corrupted files, Customized SSL, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Best IQ Test published at the 'play' market has multiple vulnerabilities...

CVE-2014-5678

The IQ Test aka com.pophub.androidiqtest.free application 3.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The IQ Test aka com.pophub.androidiqtest.free application 3.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5678

The IQ Test aka com.pophub.androidiqtest.free application 3.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5678

The CVE-2014-5678 entry concerns the Android app IQ Test (com.pophub.androidiqtest.free) version 3.3, which fails to verify X.509 certificates when connecting to SSL servers. The root cause is SSL certificate validation being bypassed, enabling MITM attackers to spoof servers and extract sensitiv...