PHP: sets environmental variable based on user supplied Proxy request header

It was discovered that PHP did not properly protect against the HTTPPROXY variable name clash. A remote attacker could possibly use this flaw to redirect HTTP requests performed by a PHP script to an attacker-controlled proxy via a malicious HTTP request...

PHP: sets environmental variable based on user supplied Proxy request header

It was discovered that PHP did not properly protect against the HTTPPROXY variable name clash. A remote attacker could possibly use this flaw to redirect HTTP requests performed by a PHP script to an attacker-controlled proxy via a malicious HTTP request...

PHP: sets environmental variable based on user supplied Proxy request header

It was discovered that PHP did not properly protect against the HTTPPROXY variable name clash. A remote attacker could possibly use this flaw to redirect HTTP requests performed by a PHP script to an attacker-controlled proxy via a malicious HTTP request...

PHP: sets environmental variable based on user supplied Proxy request header

It was discovered that PHP did not properly protect against the HTTPPROXY variable name clash. A remote attacker could possibly use this flaw to redirect HTTP requests performed by a PHP script to an attacker-controlled proxy via a malicious HTTP request...

Medium: php55, php56

Issue Overview: A stack consumption vulnerability in GD in PHP allows remote attackers to cause a denial of service via a crafted imagefilltoborder call. CVE-2015-8874 An integer overflow, leading to a heap-based buffer overflow was found in the imagecreatefromgd2 function of PHP's gd extension. ...

CVE-2016-1000110

The CGIHandler class in Python before 2.7.12 does not protect against the HTTPPROXY variable name clash in a CGI script, which could allow a remote attacker to redirect HTTP requests...

UBUNTU-CVE-2016-1000110

The CGIHandler class in Python before 2.7.12 does not protect against the HTTPPROXY variable name clash in a CGI script, which could allow a remote attacker to redirect HTTP requests...

Clash of Heroes - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Clash of Heroes published at the 'play' market has multiple vulnerabilities...

Clash of Dragons - Dangerous filesystem permissions, MIT license, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Clash of Dragons published at the 'play' market has multiple vulnerabilities...

Clash of Plans - Dynamic Code Loading, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Clash of Plans published at the 'play' market has multiple vulnerabilities...

Clash of Zombies II - WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Clash of Zombies II published at the 'play' market has multiple vulnerabilities...

Clash of Lords 2: Español - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Clash of Lords 2: Español published at the 'play' market has multiple vulnerabilities...

CLASH TD - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application CLASH TD published at the 'play' market has multiple vulnerabilities...

Clash of Lords 2: Clash Divin - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Clash of Lords 2: Clash Divin published at the 'play' market has multiple vulnerabilities...

Clash of Lords 2: حرب القبائل - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Clash of Lords 2: حرب القبائل published at the 'play' market has multiple vulnerabilities...

Castle Clash: ยุคแห่งตำนาน - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Castle Clash: ยุคแห่งตำนาน published at the 'play' market has multiple vulnerabilities...

Castle Clash: 전설의 시대 - Base64 encoded String, Runtime privilege escalation, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Castle Clash: 전설의 시대 published at the 'play' market has multiple vulnerabilities...

Castle Clash: Era de Leyendas - Base64 encoded String, Customized SSL, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Castle Clash: Era de Leyendas published at the 'play' market has multiple vulnerabilities...

Castle Clash：ヒーロー進化 - Base64 encoded String, Runtime privilege escalation, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Castle Clash：ヒーロー進化 published at the 'play' market has multiple vulnerabilities...

Clash of Mafias - Customized SSL, Dangerous filesystem permissions, Hardcoded secrets vulnerabilities

HackApp vulnerability scanner discovered that application Clash of Mafias published at the 'play' market has multiple vulnerabilities...