security aspects specific to the Java programming language and libraries.
2
votes
0answers
50 views
POC of a Java exploit using leftover JREs
Summary: I would like to show a proof of concept of a Java exploit using an old JRE on an up-to-date machine to cut short discussions on the "but we are patched so why removing older versions" ...
1
vote
0answers
35 views
AppEngine Sandbox
Does anyone know how the AppEngine sandbox is implemented? I heard they use a SecurityManager with Java but surely they are using another layer as well like LXC. I've looked at the whitelist and there ...
0
votes
0answers
48 views
Can Jasper files be used as shells to attack java web apps?
JasperReports is an open source Java reporting tool that can write to a variety of targets, such as: screen, a printer, into PDF, HTML, Microsoft Excel, RTF, ODT, Comma-separated values or XML ...
0
votes
0answers
289 views
Java Servlet request.getRequestURL() logged abnormal string
I had asked this question in stackexchange.com ( http://stackoverflow.com/questions/10496410/java-servlet-request-getrequesturl-logged-abnormal-string/10496937#10496937). Since this place is more ...
-6
votes
0answers
31 views
Close the virtual machine (vmware) customer
It is possible to close the virtual machine (vmware) on this machine where it is installed, and leave the remote access only certain IP ?
