2764 matches found
Information disclosure
The Live TV Browser aka com.wHDSmartBrowser application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-7466
The CVE-2014-7466 issue affects the Live TV Browser (com.wHDSmartBrowser) app v2.0 on Android. The root cause is that SSL servers’ X.509 certificates are not verified, enabling a man-in-the-middle attacker to spoof a server and access sensitive information via a crafted certificate. The vulnerabi...
CVE-2014-7466
The Live TV Browser aka com.wHDSmartBrowser application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-6987
The Mass Gaming TV aka net.massgamers application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-6998
The PinkFong TV aka kr.co.smartstudy.pinkfongtvandroidgooglemarket application 4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Information disclosure
The PinkFong TV aka kr.co.smartstudy.pinkfongtvandroidgooglemarket application 4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-6998
The PinkFong TV aka kr.co.smartstudy.pinkfongtvandroidgooglemarket application 4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-6998
The PinkFong TV Android app (package kr.co.smartstudy.pinkfongtv_android_googlemarket, version 4) does not verify X.509 certificates from SSL servers, enabling MITM attackers to spoof servers and obtain sensitive information via a crafted certificate. The root cause is improper certificate valida...
Information disclosure
The Campus Link - Campus TV HKUSU aka com.campus.tv.hkusu application 2.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-6783
The Campus Link - Campus TV HKUSU aka com.campus.tv.hkusu application 2.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-6783
The Campus Link - Campus TV HKUSU Android app (package com.campus.tv.hkusu, version 2.2) does not verify X.509 certificates from SSL servers, allowing a man-in-the-middle attacker to spoof servers and obtain sensitive information via a crafted certificate. The CVSS notes partial impact to confide...
Home Hacking Made Simple
SEATTLE–Like most security researchers, David Jacoby is naturally curious about how things work, and whether they can be made to do things they weren’t meant to do. Sitting at home in Sweden a few months ago, he looked at all of the Web-enabled devices in his house–TV, game console, network stora...
David Jacoby on Hacking His Home
Dennis Fisher talks with David Jacoby of Kaspersky Lab about the research he did on the security of electronics gear in his home, including his smart TV, game console and storage devices, and what the vendors need to do to respond. Download: digitalunderground168.mp3 Music by Chris Gonsalves...
Apple TV < 7 Multiple Vulnerabilities
According to its banner, the remote Apple TV device is a version prior to 7. It is, therefore, affected by multiple vulnerabilities, the most serious of which can result in arbitrary code execution. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid77822;...
CVE-2014-6671
The World Cup 2014 Brazil - Xem TV aka vn.letshare.football.worldcup application 2.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-6665
The Ahmed Bukhatir Nasheeds TV aka com.wAhmedBukhatirApp application 1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-6671
The World Cup 2014 Brazil - Xem TV aka vn.letshare.football.worldcup application 2.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-6671
The CVE-2014-6671 entry concerns the World Cup 2014 Brazil app - Xem TV (vn.letshare.football.worldcup), version 2.6 for Android. The vulnerability is that the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and access sensitive infor...
CVE-2014-6665
CVE-2014-6665 affects the Android app “Ahmed Bukhatir Nasheeds TV” (com.wAhmedBukhatirApp) v1.0. The root cause is that the app does not validate SSL X.509 certificates when establishing TLS connections, enabling MITM attackers to spoof servers and exfiltrate or modify sensitive information. The ...
Apple TV multiple security vulnerabilities
Weak authentication, unauthorized access, information leakage, race conditions, protection bypass, memory corruptions on different formats parsing...