EUVD-2014-7249

Malware in sbrugna...

CVE-2014-7378

The Jobranco aka com.jobranco application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Jobranco aka com.jobranco application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7378

The CVE-2014-7378 entry concerns the Jobranco (com.jobranco) Android app v1.1, which does not verify X.509 SSL certificates. This allows MITM attackers to spoof servers and obtain sensitive information via a crafted certificate. The vulnerability affects the app’s SSL certificate validation logic...