EUVD-2014-7611

Malware in sbrugna...

CVE-2014-7740

The Pony Magazine aka com.triactivemedia.ponymagazine application @7F080193 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7740

The Pony Magazine aka com.triactivemedia.ponymagazine application @7F080193 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Pony Magazine aka com.triactivemedia.ponymagazine application @7F080193 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7740

The Pony Magazine aka com.triactivemedia.ponymagazine application @7F080193 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7740

The CVE-2014-7740 entry concerns the Android app Pony Magazine (com.triactivemedia.ponymagazine) where SSL/TLS servers are not verified via X.509 certificates. The root cause is missing certificate validation, enabling man-in-the-middle attackers to spoof servers and access sensitive information ...