EUVD-2014-7191

Malware in sbrugna...

CVE-2014-7320

The SHIRAKABA aka com.SHIRAKABA application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The SHIRAKABA aka com.SHIRAKABA application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7320

CVE-2014-7320 concerns the Android SHIRAKABA (com.SHIRAKABA) 1.0 app, where the SSL/TLS layer fails to verify X.509 certificates presented by servers. The root cause is the app not validating server certificates, which enables a man-in-the-middle to spoof the server and retrieve sensitive informa...

CVE-2014-7320

The SHIRAKABA aka com.SHIRAKABA application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...