Avira Mobile Security for iOS Information Disclosure Vulnerability

Avira Mobile Security for iOS is a set of mobile security software based on the iOS platform from Avira Germany. An information disclosure vulnerability exists in iOS-based versions of Avira Mobile Security prior to 1.5.11, which originates when the program sends sensitive login information in...

Wawa Employees Credit Union Mobile Information Disclosure Vulnerability

Wawa Employees Credit Union Mobile allows you to bank anywhere, anytime. Wawa Employees Credit Union Mobile for iOS fails to validate SSL servers with X.509 certificates, allowing man-in-the-middle attackers to spoof servers and gain access to sensitive information by crafting certificates...

Design/Logic Flaw

The Avira Mobile Security app before 1.5.11 for iOS sends sensitive login information in cleartext...

CVE-2015-7732

The Avira Mobile Security app before 1.5.11 for iOS sends sensitive login information in cleartext...

CVE-2015-7732

The Avira Mobile Security app before 1.5.11 for iOS sends sensitive login information in cleartext...

CVE-2015-7732

CVE-2015-7732 affects Avira Mobile Security for iOS prior to 1.5.11. The vulnerability is an information disclosure where the app sends sensitive login information in cleartext, potentially exposing credentials. Multiple connected sources corroborate the issue and identify the impacted version ra...

CVE-2015-7732: Exposure of Sensitive Information to an Unauthorized Actor

The Avira Mobile Security app before 1.5.11 for iOS sends sensitive login information in cleartext...

PT-2017-7264

Name of the Vulnerable Software and Affected Versions Avira Mobile Security version 1.5.10 and earlier Description The issue concerns the Avira Mobile Security app sending sensitive login information in cleartext. Recommendations For Avira Mobile Security version 1.5.10 and earlier, update to...

Mobile Security & Antivirus - Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Mobile Security & Antivirus published at the 'play' market has multiple vulnerabilities...

Decade Long Partnership = Global Partner Innovation Award

Here at Trend Micro we highly value the relationships we’ve build with our partners, especially those that have spanned several years. However, it’s particularly gratifying when those partners choose to recognize our work with an award. So, excuse us while we toot our own horn’s for a bit...

Radio Javan app for iOS authentication vulnerability

Radio Javan app for iOS is an iOS-based audio playback application from Radio Javan. An authentication vulnerability exists in versions 9.3.4 through 9.6.1 of the Radio Javan app for iOS, which stems from the program failing to validate an X.509 certificate on the server side of an SSL server. An...

Panda Mobile Security for iOS Man-in-the-Middle Attack Vulnerability

Panda Mobile Security for iOS is a mobile antivirus product for iOS developed by the Spanish company Panda Security. The product protects mobile networks from viruses, spyware, hackers and other Internet threats. A security vulnerability exists in version 1.1 of Panda Mobile Security for iOS. An...

CVE-2017-8060

Acceptance of invalid/self-signed TLS certificates in "Panda Mobile Security" 1.1 for iOS allows a man-in-the-middle and/or physically proximate attacker to silently intercept information sent during the login API call...

CVE-2017-8060

Acceptance of invalid/self-signed TLS certificates in "Panda Mobile Security" 1.1 for iOS allows a man-in-the-middle and/or physically proximate attacker to silently intercept information sent during the login API call...

Code injection

Acceptance of invalid/self-signed TLS certificates in "Panda Mobile Security" 1.1 for iOS allows a man-in-the-middle and/or physically proximate attacker to silently intercept information sent during the login API call...

CVE-2017-8060

The CVE describes a flaw in Panda Mobile Security for iOS 1.1 where the app accepts invalid/self-signed TLS certificates, enabling a man-in-the-middle to silently intercept data during the login API call. The connected CNVD/CNVD-related entries corroborate the same vulnerable behavior, focusing o...

CVE-2017-8060

Acceptance of invalid/self-signed TLS certificates in "Panda Mobile Security" 1.1 for iOS allows a man-in-the-middle and/or physically proximate attacker to silently intercept information sent during the login API call...

PT-2017-18100

Name of the Vulnerable Software and Affected Versions Panda Mobile Security version 1.1 Description The issue allows a man-in-the-middle and/or physically proximate attacker to silently intercept information sent during the login API call due to the acceptance of invalid/self-signed TLS...

CVE-2017-8060: Improper Certificate Validation

Acceptance of invalid/self-signed TLS certificates in "Panda Mobile Security" 1.1 for iOS allows a man-in-the-middle and/or physically proximate attacker to silently intercept information sent during the login API call...

Google Android Qualcomm has an unspecified vulnerability (CNVD-2017-06759)

Android is a cell phone operating system based on the Linux open kernel. Google Android Qualcomm has a security vulnerability that allows attackers to perform security attacks...