Design/Logic Flaw

The Fuel Rewards Network aka com.excentus.frn application 1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6020

The CVE-2014-6020 entry describes a vulnerability in the Fuel Rewards Network Android app (com.excentus.frn) where SSL/TLS servers’ X.509 certificates are not verified, enabling MITM attackers to spoof servers and exfiltrate sensitive data via a crafted certificate. According to the NVD entry, th...

CVE-2008-7015

The CVE-2008-7015 entry affects Unreal Engine 3 bindings used by games such as Unreal Tournament 3 (1.3) and Frontlines: Fuel of War (1.1.1). The issue arises when a remote attacker sends a packet with a large length value, triggering a memory allocation failure that can cause the server to exit ...