security.websecurity (thread)

*****SPAM***** New Wordpress 2.2.1 Vulnerabilities and the First Weblog XSS Worm, mybeni websecurity
List slowdown during blackhat, robert
False Positives with .NET's Request Validation?, David Felio
- Re: False Positives with .NET's Request Validation?, Arian J. Evans
  - Re: False Positives with .NET's Request Validation?, James Landis
Blackhat presenter denied entry to US, bugtraq
attribute based XSS, Brian Eaton
- Re: attribute based XSS, Stefan Esser
- Re: attribute based XSS, Arian J. Evans
Persistent HTML Injection, Yiannis Pavlosoglou
[SecNiche Security] WAZ (v 1.0) : Windows Anti Zomb Killer Released, Aditya K Sood
[SecNiche Security] WAZ (v 1.0) : Windows Anti Zomb Killer Released, Aditya K Sood
Am I missing anything ?, Deeþàn Chakravarthÿ
- Re: Am I missing anything ?, Stack Smasher
- Re: [Full-disclosure] Am I missing anything ?, bugtraq
- Re: [Full-disclosure] Am I missing anything ?, Valdis . Kletnieks
- Re: Am I missing anything ?, Trancer
- Re: Am I missing anything ?, J. Patterson Wicks
- Re: Am I missing anything ?, kwestin
- Re: Am I missing anything ?, Steven Adair
- Re: [Full-disclosure] Am I missing anything ?, Simon Smith
- Re: Am I missing anything ?, Sebastian Krahmer
- Re: Am I missing anything ?, David Byrne
- Re: Am I missing anything ?, Joey Mengele
  - Re: Am I missing anything ?, Simon Smith
- Re: Am I missing anything ?, Joey Mengele
  - Re: Am I missing anything ?, Simon Smith
- Re: Am I missing anything ?, Joey Mengele
  - Re: Am I missing anything ?, Simon Smith
    - Re: Am I missing anything ?, spuds1
  - Re: Am I missing anything ?, Kevin Finisterre (lists)
- Re: Am I missing anything ?, Joey Mengele
  - Re: Am I missing anything ?, Simon Smith
    - Re: Am I missing anything ?, nocon
    - Re: Am I missing anything ?, gjgowey
[CVE 2007-3816] [Advisory] Vulnerability Facts Related JWIG Advisory, Aditya K Sood
- Re: [CVE 2007-3816] [Advisory] Vulnerability Facts Related JWIG Advisory, Pranay Kanwar
  - Re: [CVE 2007-3816] [Advisory] Vulnerability Facts Related JWIG Advisory, Debasis Mohanty
new version of XSSDB, pdp (architect)
digital stalking, Google SearchHistory RSS Interface, pdp (architect)
- Re: [WEB SECURITY] digital stalking, Google SearchHistory RSS Interface, Greenarrow 1
  - Re: [WEB SECURITY] digital stalking, Google SearchHistory RSS Interface, pdp (architect)
  - Re: digital stalking, Google SearchHistory RSS Interface, pdp (architect)
HDIV: Struts 2 Security Plugin, Gorka Vicente
[CVE-2007-3816][Advisory] JWIG Context-Dependent Template Calling Dos, Aditya K Sood
- Re: [CVE-2007-3816][Advisory] JWIG Context-Dependent Template Calling Dos, Bubba Gump
  - Re: [CVE-2007-3816][Advisory] JWIG Context-Dependent Template Calling Dos, Aditya K Sood
  - Re: [CVE-2007-3816][Advisory] JWIG Context-Dependent Template Calling Dos, Pranay Kanwar
- [CVE-2007-3816][Advisory] JWIG Context-Dependent Template Calling Dos, Aditya K Sood
- [CVE-2007-3816][Advisory] JWIG Context-Dependent Template Calling Dos, Aditya K Sood
SPI Labs finds flaws with Avoid iPhone's web dial, Billy Hoffman
Client-side JavaScript XSS Scanner - runs straight from your browser, pdp (architect)
Official release of SQL Power Injector 1.2, Francois Larouche
JavaScript Spider - Yahoo Site Explorer Spider, pdp (architect)
projections - another Web2.0/Security projection, pdp (architect)
[Advisory] Phishing Vulnerability in Verisign Network, Aditya K Sood
[MSA01110707] Flash Player/Plugin Video file parsing Remote Code Execution, Minded Security Research Labs
The new dawn of filter evasion, pdp (architect)
<img src=> aint working, Esteban Ribičić
- RE: <img src=> aint working, Matt Fisher
XWW - cross webmail Worn - PoC, Rosario Valotta
- Re: XWW - cross webmail Worn - PoC, Travis Altman
Session hijacking protection, frederic . lebeau
- AW: Session hijacking protection, Gabriel Kälin
  - RE: Session hijacking protection, Boaz Shunami
Anti-DNS Pinning and Java Applets, David Byrne
XSSDB Elite (Web2.0 Engineering), pdp (architect)
Attacking Password Recovery Facilities, pdp (architect)
- Re: [WEB SECURITY] Attacking Password Recovery Facilities, Esteban Ribičić
Last Week of Reflection - Dinis Cruz, Anurag Agarwal
- Secure Programming with Static Analysis, Jacob West
DNS Pinning Explained, christ1an
Security on AIR: Local file access through JavaScript, fukami
The Top 5 most Popular Web2.0 Services Hackers Cannot live Without, pdp (architect)