EUVD-2014-7211

Malware in sbrugna...

EUVD-2014-5830

Malware in sbrugna...

EUVD-2017-5923

Malware in sbrugna...

EUVD-2014-6986

Malware in sbrugna...

EUVD-2014-7436

Malware in sbrugna...

EUVD-2014-6763

Malware in sbrugna...

EUVD-2014-6586

Malware in sbrugna...

PT-2017-19044

Name of the Vulnerable Software and Affected Versions HBO Mobile Banking version 3.0.0 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate because the app does not verify X.509 certificates from SSL servers...

CVE-2014-7764

The Semper Invicta Fitness aka com.semper.invicta.fitness application 1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7733

The Karaf Magazin aka com.magzter.karafmagazin application 3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7054

Summary of CVE-2014-7054 : The Android app musica de barrios sonideros (package com.nobexinc.wls_93155702.rc), version 3.3.10, does not verify X.509 certificates when connecting to SSL servers. This allows a man‑in‑the‑middle attacker to spoof servers and obtain sensitive information via a crafte...

PT-2014-7634

Name of the Vulnerable Software and Affected Versions com.coreapps.android.followme.ismrm esmrmb14 version 6.0.8.5 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509...

PT-2014-7501

Name of the Vulnerable Software and Affected Versions com.anek.kamkomesan version 1.0 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not verify X.509 certificates from SSL servers...

Design/Logic Flaw

The GnuTLS backend in libcurl 7.21.4 through 7.33.0, when disabling digital signature verification CURLOPTSSLVERIFYPEER, also disables the CURLOPTSSLVERIFYHOST check for CN or SAN host name fields, which makes it easier for remote attackers to spoof servers and conduct man-in-the-middle MITM...