EUVD-2014-6565

Malware in sbrugna...

CVE-2014-6687

The wSaudichannelAlNasr aka com.wSaudichannelAlNasr application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The wSaudichannelAlNasr aka com.wSaudichannelAlNasr application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6687

The CVE-2014-6687 entry concerns the Android app wSaudichannelAlNasr (com.wSaudichannelAlNasr) version 0.1, which does not verify X.509 certificates from SSL servers. Root cause: missing certificate validation enables MITM attackers to spoof servers and access sensitive information via a crafted ...