Digital signatures under plain RSA
I happened to see some similar question like this. The question mentioned about sending fake signature message. The method is like this:


Find some random string R.
Use the public key to encrypt the random string R, let the result be X.


(R,X) is your signature pair.(Think backwards)
When someone verifies the signature, he'll compare {R} with X which are equal.