jetlib.sec » Tags » jar

Feeds

133363 items (0 unread) in 27 feeds

• 1337day (was: Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

8 items tagged "jar"

Related tags: directory traversal vulnerability [+], jar archive [+], fastjar [+], extract [+], zero day [+], user [+], jar file [+], hacks [+], directory [+], vacuum tube [+], siteerror [+], panaplex [+], misc [+], meta [+], magnet [+], mad scientist [+], look [+], javatest [+], java [+], jam jar [+], hot knife [+], home [+], classic [+], brain in a jar [+], argon [+], absolute path [+]

• October 31, 2010
• 12:13

  Large magnets spark on Halloween, who knew?

   » ‎ Hack a Day
  This overly large magnet certainly completes the mad scientist look (for an even crazier look, take a jar of water with red food coloring and place in one large cauliflower, instant brain in a jar). The base of the magnet is painted foam cut with a makeshift hot-knife; to get the magnet sparking [Macegr] laser [...]

  Tags:  magnet jar look brain-in-a-jar mad-scientist hot-knife misc hacks  

• October 22, 2010
• 6:44

  Panaplex in a jar

   » ‎ Hack a Day
  Check out this home made panaplex display. Panaplex displays are closely related to nixie tubes, but instead of layering individual numbers and lighting them separately, it uses pieces to build the numbers like a digital display. [Lindsay] managed to make one at home, using a jam jar as the vacuum tube.  Argon as the gas [...]

  Tags:  jar panaplex home vacuum-tube jam-jar argon classic hacks  

• October 19, 2010
• 18:02

  ZDI-10-218.txt

   » ‎ Packet Storm Security Recent Files
  Zero Day Initiative Advisory 10-218 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM DB2. Authentication is required in that a user must have the ability to connect to the database. The specific flaw exists within the install_jar procedure. The install_jar procedure contains a directory traversal vulnerability that will allow the attacker to upload a Jar file to a directory outside of the intended \\function\\jar\\Name_of_logged_user\\ directory. A remote attacker can abuse this to execute arbitrary code under the context of the SYSTEM user.

  Tags:  user directory jar directory-traversal-vulnerability zero-day jar-file  

• 18:01

  ZDI-10-218.txt

   » ‎ Packet Storm Security Advisories
  Zero Day Initiative Advisory 10-218 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM DB2. Authentication is required in that a user must have the ability to connect to the database. The specific flaw exists within the install_jar procedure. The install_jar procedure contains a directory traversal vulnerability that will allow the attacker to upload a Jar file to a directory outside of the intended \\function\\jar\\Name_of_logged_user\\ directory. A remote attacker can abuse this to execute arbitrary code under the context of the SYSTEM user.

  Tags:  user directory jar directory-traversal-vulnerability zero-day jar-file  

• July 06, 2010
• 0:00

  Vuln: FastJar 'extract_jar()' Absolute Path Archive Extraction Directory Traversal Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  FastJar 'extract_jar()' Absolute Path Archive Extraction Directory Traversal Vulnerability

  Tags:  fastjar extract jar directory-traversal-vulnerability absolute-path  

• 0:00

  Vuln: FastJar 'extract_jar()' Archive Extraction Directory Traversal Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  FastJar 'extract_jar()' Archive Extraction Directory Traversal Vulnerability

  Tags:  fastjar extract jar directory-traversal-vulnerability jar-archive  

• June 22, 2010
• 0:00

  Vuln: FastJar 'extract_jar()' Archive Extraction Directory Traversal Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  FastJar 'extract_jar()' Archive Extraction Directory Traversal Vulnerability

  Tags:  fastjar extract jar directory-traversal-vulnerability jar-archive  

• April 13, 2010
• 9:33

  Decompiling Jar Files

   » ‎ Carnal0wnage
  just some notes for later on how to decompile a jar file
  
  first unzip the .jar
  
  cg$ unzip javatest3.jar
  Archive: javatest3.jar
  creating: META-INF/
  inflating: META-INF/MANIFEST.MF
  inflating: SiteError.class
  inflating: evil.class
  ...
  
  from there use jad to decompile
  
  cg$ ./jad -r -ff -s java javatest/SiteError.class Parsing javatest/SiteError.class... Generating SiteError.java
  
  thats it, now you can read the code.

  Tags:  siteerror javatest jar meta jar-archive java