EUVD-2017-6113

Malware in sbrugna...

CVE-2017-14612

"Shpock Boot Sale & Classifieds" app before 3.17.0 -- aka shpock-boot-sale-classifieds/id557153158 -- for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

"Shpock Boot Sale & Classifieds" app before 3.17.0 -- aka shpock-boot-sale-classifieds/id557153158 -- for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2017-14612

The CVE-2017-14612 entry concerns the iOS app “Shpock Boot Sale & Classifieds” (before version 3.17.0). The issue is that the app does not verify X.509 certificates from SSL servers, enabling potential MITM attackers to spoof servers and obtain sensitive information via a crafted certificate. The...

CVE-2017-14612

"Shpock Boot Sale & Classifieds" app before 3.17.0 -- aka shpock-boot-sale-classifieds/id557153158 -- for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Shpock boot sale & classifieds - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Shpock boot sale & classifieds published at the 'play' market has multiple vulnerabilities...