PT-2006-2547 · Apache · Apache Struts

Name of the Vulnerable Software and Affected Versions: Apache Software Foundation ASF Struts versions prior to 1.2.9 Description: The issue allows remote attackers to bypass validation by sending a request with a parameter org.apache.struts.taglib.html.Constants.CANCEL, causing the action to be...

OpenCA multiple signature validation bypass

The remote host seems to be running an older version of OpenCA. It is reported that OpenCA versions up to and including 0.9.1.3 contains multiple flaws that may allow revoked or expired certificates to be accepted as valid. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might ...

CVE-2005-1504: Undefined Security Weakness

GameSpy SDK CD-Key Validation Toolkit, as used by many online games, allows remote attackers to bypass the CD key validation by sending a spoofed \disc\ command, which tells the server the CD key is no longer in use...

TCW690.txt

/ Thomson TCW690 POST Password Validation exploit Tested with hardware version 2.1 and software version ST42.03.0a Bug found by: MurDoK Date: 02.19.2005 sh-3.00$ gcc mdktcw690.c -o tcw690 sh-3.00$ ./tcw690 192.168.0.1 123 Thomson TCW690 POST Password Validation Change password exploit coded by...

Solaris KCMS + TTDB Arbitrary File Read

This module targets a directory traversal vulnerability in the kcmsserver component from the Kodak Color Management System. By utilizing the ToolTalk Database Server's TTISBUILD procedure, an attacker can bypass existing directory traversal validation and read arbitrary files. Vulnerable systems...

CVE-2000-1033

Serv-U FTP Server allows remote attackers to bypass its anti-hammering feature by first logging on as a valid user possibly anonymous and then attempting to guess the passwords of other users...

PT-2009-6710 · Openssl +1 · Openssl +1

Name of the Vulnerable Software and Affected Versions: OpenSSL versions 0.9.8i and earlier Description: The issue allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature for DSA and ECDSA keys. Exploitation of this issue can lead to a violation of...