EUVD-2014-7589

Malware in sbrugna...

CVE-2014-7718

The Travel+Leisure aka com.magzter.travelleisure application 3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7718

The Travel+Leisure aka com.magzter.travelleisure application 3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Travel+Leisure aka com.magzter.travelleisure application 3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7718

The Travel+Leisure aka com.magzter.travelleisure application 3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-8209

Name of the Vulnerable Software and Affected Versions Travel+Leisure application version 3.0 for Android Description The issue concerns the Travel+Leisure application's failure to verify X.509 certificates from SSL servers. This allows man-in-the-middle attackers to spoof servers and obtain...

CVE-2014-7718: Undefined Security Weakness

The Travel+Leisure aka com.magzter.travelleisure application 3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...