Apache Tomcat 7.0.x < 7.0.8 NIO Connector DoS

Binary data 5795.pasl...

Metasploit Framework v3.5.2 latest version download !

Our favourite exploitation framework – The Metasploit Framework has been updated! We now have Metasploit Framework version 3.5.2! "The Metasploit Framework is a penetration testing toolkit, exploit development platform, and research tool. The framework includes hundreds of working remote exploits...

Apache Tomcat 6.0.x < 6.0.30 Multiple Vulnerabilities

Binary data 5789.pasl...

Apache Tomcat 6.0.x < 6.0.28 Multiple Vulnerabilities

Binary data 800595.prm...

Apache Tomcat 6.0.x < 6.0.30 Multiple Vulnerabilities

Binary data 800609.prm...

Apache Tomcat 6.0.x < 6.0.28 Multiple Vulnerabilities

Binary data 5788.pasl...

Apache Tomcat 5.5.x < 5.5.30 Multiple Vulnerabilities

Binary data 5786.pasl...

Apache Tomcat 5.5.x < 5.5.32 HTML Manager Interface XSS

Binary data 5787.pasl...

Apache Tomcat 5.5.x < 5.5.32 HTML Manager Interface XSS

According to its self-reported version number, the instance of Apache Tomcat 5.5.x listening on the remote host is prior to 5.5.32. It is, therefore, affected by a cross-site scripting vulnerability in its HTML Manager interface. An input validation error exists in the HTML Manager interface of...

Apache Tomcat 5.5.x < 5.5.30 Multiple Vulnerabilities

Binary data 800613.prm...

Apache Tomcat 5.5.x < 5.5.32 Cross-site Scripting Vulnerability

Binary data 800600.prm...

Apache Tomcat 6.0.x < 6.0.32 Denial of Service Vulnerability

Binary data 800599.prm...

Apache Tomcat 6.0.x < 6.0.32 NIO Connector DoS

Binary data 5790.pasl...

Apache Tomcat 7.0.0 < 7.0.4

The version of Tomcat installed on the remote host is prior to 7.0.4. It is, therefore, affected by a vulnerability as referenced in the fixedinapachetomcat7.0.4security-7 advisory. - Apache Tomcat 7.0.0 through 7.0.3, 6.0.x, and 5.5.x, when running within a SecurityManager, does not make the...

Important: Red Hat Security Advisory: jbossweb security update

A patch for JBoss Enterprise Application Platform 4.2.0.CP09, 4.3.0.CP09, and 5.1 that fixes one security issue is now available from the Red Hat Customer Portal. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CV...

Important: Red Hat Security Advisory: jbossweb security update

Updated jbossweb packages that fix one security issue are now available for JBoss Enterprise Web Platform 5 for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score,...

Important: Red Hat Security Advisory: jbossweb security update

Updated jbossweb packages that fix one security issue are now available for JBoss Enterprise Application Platform 4.2, 4.3, and 5.1, for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring...

CVE-2011-0534

Apache Tomcat 7.0.0 through 7.0.6 and 6.0.0 through 6.0.30 does not enforce the maxHttpHeaderSize limit for requests involving the NIO HTTP connector, which allows remote attackers to cause a denial of service OutOfMemoryError via a crafted request...

CVE-2010-3718

Apache Tomcat 7.0.0 through 7.0.3, 6.0.x, and 5.5.x, when running within a SecurityManager, does not make the ServletContext attribute read-only, which allows local web applications to read or write files outside of the intended working directory, as demonstrated using a directory traversal attac...

Directory traversal

Apache Tomcat 7.0.0 through 7.0.3, 6.0.x, and 5.5.x, when running within a SecurityManager, does not make the ServletContext attribute read-only, which allows local web applications to read or write files outside of the intended working directory, as demonstrated using a directory traversal attac...