EUVD-2018-17040

Malware in sbrugna...

CVE-2018-5258

The Neon app 1.6.14 iOS does not verify X.509 certificates from SSL servers, which allows remote attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2018-5258

The Neon app 1.6.14 iOS does not verify X.509 certificates from SSL servers, which allows remote attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Neon app 1.6.14 iOS does not verify X.509 certificates from SSL servers, which allows remote attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2018-5258

The CVE-2018-5258 entry concerns the Neon app for iOS (version 1.6.14) and describes a failure to verify X.509 certificates from SSL servers. The underlying issue is insecure certificate handling in the app, which enables remote attackers to spoof legitimate SSL servers and potentially obtain sen...

CVE-2018-5258

The Neon app 1.6.14 iOS does not verify X.509 certificates from SSL servers, which allows remote attackers to spoof servers and obtain sensitive information via a crafted certificate...

Neon app for iOS certificate validation vulnerability

Neon app for iOS is an iOS-based money management application authorized by Banco do Brasil. A certificate validation vulnerability exists in version 1.6.14 of the Neon app for iOS, which stems from the program's failure to detect X.509 certificates in the SSL server. A remote attacker can exploi...