Code injection

Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 10.3, 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, and 7.0 SP7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to the Servlet Container Package...

CVE-2009-1974

Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 10.3, 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, and 7.0 SP7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to the Servlet Container Package...

CVE-2009-1974: Undefined Security Weakness

Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 10.3, 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, and 7.0 SP7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to the Servlet Container Package...

CVE-2009-2268

Cross-site scripting XSS vulnerability in the Cross-Domain Controller CDC servlet in Sun Java System Access Manager 6 2005Q1, 7 2005Q4, and 7.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2009-2268: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Cross-Domain Controller CDC servlet in Sun Java System Access Manager 6 2005Q1, 7 2005Q4, and 7.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Vulnerabilities fixed in Apache Tomcat

From The H Security The Apache Tomcat developers have released patches to fix three vulnerabilities in their implementations of the Java Servlet and JavaServer Pages technologies. When Tomcat receives a request with invalid headers via the Java AJP connector, it closes the connection without...

[SECURITY] Fedora 10 Update: jetty-5.1.15-3.fc10

Jetty is a 100% Java HTTP Server and Servlet Container. This means that you do not need to configure and run a separate web server like Apache in order to use java, servlets and JSPs to generate dynamic content. Jetty is a fully featured web server for static and dynamic content. Unlike separate...

[SECURITY] Fedora 11 Update: jetty-5.1.15-4.fc11

Jetty is a 100% Java HTTP Server and Servlet Container. This means that you do not need to configure and run a separate web server like Apache in order to use java, servlets and JSPs to generate dynamic content. Jetty is a fully featured web server for static and dynamic content. Unlike separate...

Mortbay Jetty <= 7.0.0-pre5 Dispatcher Servlet Denial of Service Exploit

No description provided by source. ?php Mortbay Jetty = 7.0.0-pre5 Dispatcher Servlet DoS Affected Software: Jetty 6.1.16, 7.0.0.pre5 all platforms Author: Ikki http://blog.nibblesec.org/ Description: The dispatcher servlet com.acme.DispatchServlet is prone to a DoS vulnerability. This example...

Mortbay Jetty <= 7.0.0-pre5 Dispatcher Servlet Denial of Service Exploit

Exploit for multiple platform in category dos / poc ======================================================================== Mortbay Jetty = 7.0.0-pre5 Dispatcher Servlet Denial of Service Exploit ======================================================================== ?php Mortbay Jetty =...

Mortbay Jetty Denial Of Service

?php Mortbay Jetty = 7.0.0-pre5 Dispatcher Servlet DoS Affected Software: Jetty 6.1.16, 7.0.0.pre5 all platforms Author: Ikki http://blog.nibblesec.org/ Description: The dispatcher servlet com.acme.DispatchServlet is prone to a DoS vulnerability. This example servlet is meant to be used as a...

Mortbay Jetty 7.0.0-pre5 Dispatcher Servlet - Denial of Service

Mortbay Jetty 7.0.0-pre5 Dispatcher Servlet - Denial of Service ?php Mortbay Jetty = 7.0.0-pre5 Dispatcher Servlet DoS Affected Software: Jetty 6.1.16, 7.0.0.pre5 all platforms Author: Ikki http://blog.nibblesec.org/ Description: The dispatcher servlet com.acme.DispatchServlet is prone to a DoS...

Mortbay Jetty 7.0.0-pre5 Dispatcher Servlet - Denial of Service

?php Mortbay Jetty = 7.0.0-pre5 Dispatcher Servlet DoS Affected Software: Jetty 6.1.16, 7.0.0.pre5 all platforms Author: Ikki http://blog.nibblesec.org/ Description: The dispatcher servlet com.acme.DispatchServlet is prone to a DoS vulnerability. This example servlet is meant to be used as a...

Oracle Application Server Spy Servlet SID Enumeration

This module makes a request to the Oracle Application Server in an attempt to discover the SID. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Oracle Application Server Spy Servlet SID...

Mandrake Linux Security Advisory : tomcat5 (MDKSA-2007:241)

A number of vulnerabilities were found in Tomcat : A directory traversal vulnerability, when using certain proxy modules, allows a remote attacker to read arbitrary files via a .. dot dot sequence with various slash, backslash, or url-encoded backslash characters CVE-2007-0450; affects Mandriva...

CVE-2008-6666: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Kronos webTA allow remote attackers to inject arbitrary web script or HTML via the description field to 1 servlet/com.threeis.webta.H710selProject and 2 servlet/com.threeis.webta.H720editProjectInfo. NOTE: BID:29610 states that the initial repo...

Code injection

The Servlet Engine/Web Container and JSP components in IBM WebSphere Application Server WAS 5.1.0, 5.1.1.19, 6.0.2 before 6.0.2.35, 6.1 before 6.1.0.23, and 7.0 before 7.0.0.3 allow remote attackers to read arbitrary files contained in war files in 1 web-inf, 2 meta-inf, and unspecified other...

CVE-2009-0508

The Servlet Engine/Web Container and JSP components in IBM WebSphere Application Server WAS 5.1.0, 5.1.1.19, 6.0.2 before 6.0.2.35, 6.1 before 6.1.0.23, and 7.0 before 7.0.0.3 allow remote attackers to read arbitrary files contained in war files in 1 web-inf, 2 meta-inf, and unspecified other...

CVE-2009-0508: Exposure of Sensitive Information to an Unauthorized Actor

The Servlet Engine/Web Container and JSP components in IBM WebSphere Application Server WAS 5.1.0, 5.1.1.19, 6.0.2 before 6.0.2.35, 6.1 before 6.1.0.23, and 7.0 before 7.0.0.3 allow remote attackers to read arbitrary files contained in war files in 1 web-inf, 2 meta-inf, and unspecified other...

RedHat Update for tomcat RHSA-2008:0648-01

Check for the Version of tomcat OpenVAS Vulnerability Test RedHat Update for tomcat RHSA-2008:0648-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...