CVE-2014-5632

The CVE-2014-5632 entry concerns the Android game Mega Jump (package com.getsetgames.megajump). The issue is that the app does not verify X.509 certificates from SSL servers, creating a man-in-the-middle risk where an attacker could spoof TLS endpoints and exfiltrate sensitive information via a c...