EUVD-2014-7224

Malware in sbrugna...

CVE-2014-7353

The JAZAN 24 aka com.jazan24.Mcreda application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The JAZAN 24 aka com.jazan24.Mcreda application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7353

The JAZAN 24 aka com.jazan24.Mcreda application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7353

The CVE-2014-7353 entry concerns the JAZAN 24 Android app (com.jazan24.Mcreda) version 1.0 that fails to verify SSL X.509 certificates. The root cause is improper certificate validation, enabling man-in-the-middle attackers to spoof servers and extract sensitive information via a crafted certific...