EUVD-2017-14977

Malware in sbrugna...

PayQuicker app SSL certificate validation vulnerability

PayQuicker app for iOS is a fast payment solution based on iOS. A security vulnerability exists in version 1.0.0 of the PayQuicker app for iOS, which stems from the program failing to validate an X.509 certificate on the server side of an SSL server. The vulnerability can be exploited to conduct ...

Information disclosure

The PayQuicker app 1.0.0 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2017-5902

The PayQuicker app 1.0.0 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2017-5902

The PayQuicker app 1.0.0 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2017-5902

The PayQuicker app 1.0.0 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2017-5902

PayQuicker app 1.0.0 for iOS fails to verify X.509 certificates from SSL servers, due to improper TLS certificate validation in the iOS client. Root cause: insecure certificate handling during TLS handshake, allowing man‑in‑the‑middle attackers to impersonate trusted servers and obtain sensitive ...