CVE-2014-6972

The Kazakhstan Radio aka com.wordbox.kazakhstanRadio application 2.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6972

The CVE-2014-6972 entry concerns the Android app Kazakhstan Radio (com.wordbox.kazakhstanRadio) version 2.5, where the app does not verify X.509 certificates from SSL servers. This allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. The ...

CVE-2014-6922

The KFAI Community Radio aka com.skyblue.pra.kfai application 2.0.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6922

The KFAI Community Radio aka com.skyblue.pra.kfai application 2.0.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6930

The CVE-2014-6930 issue affects the Android app “The Abram Radio Groove!” (com.nobexinc.wls_79226887.rc) version 3.2.3. The vulnerability is that the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via...

CVE-2014-6922

The CVE-2014-6922 entry refers to the KFAI Community Radio (Android app, package com.skyblue.pra.kfai) version 2.0.4, which does not verify X.509 certificates when connecting to SSL servers. This behavior enables man-in-the-middle attackers to spoof servers and exfiltrate sensitive information vi...

CVE-2014-6792

The Suriname Radio aka com.wordbox.surinameRadio application 1.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Suriname Radio aka com.wordbox.surinameRadio application 1.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6792

The CVE-2014-6792 entry concerns the Suriname Radio (com.wordbox.surinameRadio) Android application, version 1.5. The linked documents confirm that the app does not verify X.509 certificates from SSL servers, enabling potential man-in-the-middle disclosure of sensitive data via crafted certificat...

CVE-2014-6678

The Algeria Radio aka com.wordbox.algeriaRadio application 2.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6653

The Afghan Radio aka com.wordbox.afghanRadio application 2.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Algeria Radio aka com.wordbox.algeriaRadio application 2.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Afghan Radio aka com.wordbox.afghanRadio application 2.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6678

The Algeria Radio aka com.wordbox.algeriaRadio application 2.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6653

The Afghan Radio aka com.wordbox.afghanRadio application 2.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6678

The Algeria Radio Android app (com.wordbox.algeriaRadio) version 2.5 does not verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. This affects the app’s ability to ensure secure TLS connectio...

CVE-2014-6653

The Afghan Radio Android app (package com.wordbox.afghanRadio), version 2.5, is affected by CVE-2014-6653 due to not validating X.509 TLS certificates. This allows man-in-the-middle attackers to spoof servers and access sensitive information via a crafted certificate. According to NVD, the impact...

Hacking Traffic Lights is Amazingly Really Easy

Hacking Internet of Things IoTs have become an amazing practice for cyber criminals out there, but messing with Traffic lights would be something more crazy for them. The hacking scenes in hollywood movies has just been a source of entertainment for the technology industry, like we've seen traffi...

DEBIAN-CVE-2014-5164

The rlcdecodeli function in epan/dissectors/packet-rlc.c in the RLC dissector in Wireshark 1.10.x before 1.10.9 initializes a certain structure member only after this member is used, which allows remote attackers to cause a denial of service application crash via a crafted packet...

[SECURITY] Fedora 20 Update: fldigi-3.21.83-2.fc20

Fldigi is a modem program which supports most of the digital modes used by ham radio operators today. You can also use the program for calibrating your sound card to WWV or doing a frequency measurement test. The program also c omes with a CW decoder. fldigi is written with the help of the Fast...