CVE-2014-7075

The HAPPY (aka com.tw.knowhowdesign.sinfonghuei) application 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

• CWE-310

• http://www.kb.cert.org/vuls/id/460353US Government Resource
• http://www.kb.cert.org/vuls/id/582497US Government Resource
• https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing
• http://www.kb.cert.org/vuls/id/460353US Government Resource
• http://www.kb.cert.org/vuls/id/582497US Government Resource
• https://docs.google.com/spreadsheets/d/1t5GXwjw82SyunALVJb2w0zi3FoLRIkfGPc7AMjRF0r4/edit?usp=sharing

Published

Oct 19, 2014

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-7069The Aventino Brand (aka com.AventinoBrand) application 2.2 f…
• CVE-2014-7070The Air War Hero (aka com.dev.airwar) application 3.0 for An…
• CVE-2014-7071The Autocar India (aka com.magzter.autocarindia) application…
• CVE-2014-7072The Venezia map (aka com.wVeneziamap) application 0.1 for An…
• CVE-2014-7073The Andrew Magdy Kamal's Network (aka com.wAndSocialREWApps)…
• CVE-2014-7074Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2014-7076The Sanctuary Asia (aka com.magzter.sanctuaryasia) applicati…
• CVE-2014-7077The Gulf Coast Educators FCU (aka com.metova.cuae.gcefcu) ap…
• CVE-2014-7078The Payoneer Sign Up (aka com.wPayoneerSignUp) application 0…
• CVE-2014-7079The Romeo and Juliet (aka jp.co.cybird.appli.android.rjs) ap…
• CVE-2014-7080The Sigong ebook (aka com.sigongsa.sigonggenre) application …
• CVE-2014-7081Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…