EUVD-2015-5605

Malware in sbrugna...

CVE-2015-5655

The CVE-2015-5655 issue affects the Party Track SDK for iOS prior to 1.6.6 from Adways Inc. The underlying vulnerability is that the SDK does not verify X.509 certificates from SSL/TLS servers, enabling man-in-the-middle attacks where an attacker could intercept or modify encrypted communications...

CVE-2015-5655: Undefined Security Weakness

The Adways Party Track SDK before 1.6.6 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2015-7018

Name of the Vulnerable Software and Affected Versions Adways Party Track SDK version prior to 1.6.6 for iOS Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the SDK does not verify X.509 certificates from SSL...