EUVD-2014-5737

Malware in sbrugna...

CVE-2014-5850

The Kaave Fali aka com.didilabs.kaavefali application 1.5.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Kaave Fali aka com.didilabs.kaavefali application 1.5.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5850

The CVE-2014-5850 entry concerns the Android app Kaave Fali (package com.didilabs.kaavefali) version 1.5.1, where the app fails to verify X.509 certificates from SSL servers. The underlying root cause is improper TLS/SSL certificate validation, which enables man-in-the-middle attackers to spoof s...

CVE-2014-5850

The Kaave Fali aka com.didilabs.kaavefali application 1.5.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...