The Web Security Mailing List (2006 June)

• Date Index

• [WEB SECURITY] Evaluation of Acunetix for XSS, Fayyaz Ahmad
  • <Possible follow-ups>
  • RE: [WEB SECURITY] Evaluation of Acunetix for XSS, Fayyaz Ahmad
• [WEB SECURITY] Remote File Include Exploit, Josh L. Perrymon
  • Re: [WEB SECURITY] Remote File Include Exploit, Andrew van der Stock
  • <Possible follow-ups>
  • RE: [WEB SECURITY] Remote File Include Exploit, Ory Segal
• [WEB SECURITY] Application Security Discussion on irc.freenode.net, robert
• [WEB SECURITY] PCI standards regarding appsec to change again?, Evans, Arian
  • Re: [WEB SECURITY] PCI standards regarding appsec to change again?, Ryan Barnett
    • Re: [WEB SECURITY] PCI standards regarding appsec to change again?, Dave King
• RE: [WEB SECURITY] (XSS via file extension) XSS-Phishing on Financial Sites, Evans, Arian
  • RE: [WEB SECURITY] (XSS via file extension) XSS-Phishing on Financial Sites, RSnake
    • RE: [WEB SECURITY] (XSS via file extension) XSS-Phishing on Financial Sites, arian.evans
      • RE: [WEB SECURITY] (XSS via file extension) XSS-Phishing on Financial Sites, Matt Fisher
      • RE: [WEB SECURITY] (XSS via file extension) XSS-Phishing on Financial Sites, arian.evans
      • RE: [WEB SECURITY] (XSS via file extension) XSS-Phishing on Financial Sites, Matt Fisher
      • RE: [WEB SECURITY] (XSS via file extension) XSS-Phishing on Financial Sites, RSnake
      • [WEB SECURITY] Link spoofing + phishing on financial site in Brazil, Denny Roger
      • RE: [WEB SECURITY] (XSS via file extension) XSS-Phishing on Financial Sites, Matt Fisher
      • RE: [WEB SECURITY] (XSS via file extension) XSS-Phishing on Financial Sites, RSnake
  • <Possible follow-ups>
  • RE: [WEB SECURITY] (XSS via file extension) XSS-Phishing on Financial Sites, arian.evans
    • [WEB SECURITY] XSS via embedded file part 2, arian.evans
  • RE: [WEB SECURITY] (XSS via file extension) XSS-Phishing on Financial Sites, Belles, Mark
• [WEB SECURITY] OWASP PHP Top 5 Announcement, Andrew van der Stock
• [WEB SECURITY] Article on XSS, Steve Orrin
  • RE: [WEB SECURITY] Article on XSS, Jonathan Komorek
  • <Possible follow-ups>
  • RE: [WEB SECURITY] Article on XSS, Steve Orrin
• [WEB SECURITY] XSS-Phishing on Financial Sites (Tip of the iceberg), Jeremiah Grossman
  • Re: [WEB SECURITY] XSS-Phishing on Financial Sites (Tip of the iceberg), Ryan Barnett
  • [WEB SECURITY] RE: XSS-Phishing on Financial Sites (Tip of the iceberg), arian.evans
    • Re: [WEB SECURITY] RE: XSS-Phishing on Financial Sites (Tip of the iceberg), Brian Eaton
      • Re: [WEB SECURITY] RE: XSS-Phishing on Financial Sites (Tip of the iceberg), RSnake
      • Re: [WEB SECURITY] RE: XSS-Phishing on Financial Sites (Tip of the iceberg), Brian Eaton
      • Re: [WEB SECURITY] RE: XSS-Phishing on Financial Sites (Tip of the iceberg), RSnake
      • Re: [WEB SECURITY] RE: XSS-Phishing on Financial Sites (Tip of the iceberg), Brian Eaton
      • Re: [WEB SECURITY] RE: XSS-Phishing on Financial Sites (Tip of the iceberg), Gervase Markham
      • Re: [WEB SECURITY] RE: XSS-Phishing on Financial Sites (Tip of the iceberg), RSnake
      • Re: [WEB SECURITY] RE: XSS-Phishing on Financial Sites (Tip of the iceberg), Brian Eaton
      • Re: [WEB SECURITY] RE: XSS-Phishing on Financial Sites (Tip of the iceberg), RSnake
      • Re: [WEB SECURITY] RE: XSS-Phishing on Financial Sites (Tip of the iceberg), Brian Eaton
      • [WEB SECURITY] Application Security Program, huan chen
      • RE: [WEB SECURITY] Application Security Program, Will Jefferies
      • Re: [WEB SECURITY] RE: XSS-Phishing on Financial Sites (Tip of the iceberg), Gervase Markham
      • Re: [WEB SECURITY] RE: XSS-Phishing on Financial Sites (Tip of the iceberg), Brian Eaton
      • Re: [WEB SECURITY] RE: XSS-Phishing on Financial Sites (Tip of the iceberg), Gervase Markham
      • Re: [WEB SECURITY] RE: XSS-Phishing on Financial Sites (Tip of the iceberg), Ivan Ristic
      • RE: [WEB SECURITY] RE: XSS-Phishing on Financial Sites (Tip of the iceberg), arian.evans
      • RE: [WEB SECURITY] RE: XSS-Phishing on Financial Sites (Tip of the iceberg), RSnake
      • Re: [WEB SECURITY] RE: XSS-Phishing on Financial Sites (Tip of the iceberg), Gervase Markham
• [WEB SECURITY] Yahoo Multiple Vulnerabilities Authentication Bypass, Session Binding, Cookie Encoding Security Weakness, Cross-Site Scripting and URL Redirection, Rajesh Sethumadhavan
• [WEB SECURITY] Ajax Security Basics, robert
• RE: [WEB SECURITY] WebScurity should chime in with some facts, Evans, Arian
• [WEB SECURITY] Microsoft.fr web defacement - misconfiguration or zero-day exploit?, Hayes, Bill
  • Re: [WEB SECURITY] Microsoft.fr web defacement - misconfiguration or zero-day exploit?, Jeremiah Grossman
  • Re: [WEB SECURITY] Microsoft.fr web defacement - misconfiguration or zero-day exploit?, Gaetano Zappulla
    • Re: [WEB SECURITY] Microsoft.fr web defacement - misconfiguration or zero-day exploit?, Ryan Barnett
• [WEB SECURITY] Announcement: 'The Web Security Mailing List' RSS Feed now available, contact
• [WEB SECURITY] PayPal users being exploited by XSS Phishing Scam, Jeremiah Grossman
• [WEB SECURITY] WASC Meet-up at Black Hat (USA 2006), contact
• [WEB SECURITY] Run JSP file from Servlet, shadi Aljawarneh
  • Re: [WEB SECURITY] Run JSP file from Servlet, Felix Shnir
• [WEB SECURITY] JavaScript worm targets Yahoo!, bugtraq
• [WEB SECURITY] Tagworld XSS, RSnake
• [WEB SECURITY] tying sessions to IP addresses, Brian Eaton
  • Re: [WEB SECURITY] tying sessions to IP addresses, Ryan Barnett
    • Re: [WEB SECURITY] tying sessions to IP addresses, Brian Eaton
    • RE: [WEB SECURITY] tying sessions to IP addresses, Bill Scott
  • <Possible follow-ups>
  • RE: [WEB SECURITY] tying sessions to IP addresses, Tom Stripling
    • RE: [WEB SECURITY] tying sessions to IP addresses, Amit Klein (AKsecurity)
      • Re: [WEB SECURITY] tying sessions to IP addresses, Ryan Barnett
      • Re: [WEB SECURITY] tying sessions to IP addresses, Amit Klein (AKsecurity)
    • Re: [WEB SECURITY] tying sessions to IP addresses, Jeremiah Grossman
      • Re: [WEB SECURITY] tying sessions to IP addresses, Brian Eaton
• [WEB SECURITY] RE: MasterCard backs off Security, Leave Cardholders at Risk, Evans, Arian
  • <Possible follow-ups>
  • [WEB SECURITY] RE: MasterCard backs off Security, Leave Cardholders at Risk, Craig Wright
• [WEB SECURITY] Reusable Security for Segmented Data Domains, Stephen de Vries
• [WEB SECURITY] MasterCard backs off Security, Leave Cardholders at Risk, auto471292
  • <Possible follow-ups>
  • RE: [WEB SECURITY] MasterCard backs off Security, Leave Cardholders at Risk, robert
  • RE: [WEB SECURITY] MasterCard backs off Security, Leave Cardholders at Risk, sarah mann
• [WEB SECURITY] IBM MQSeries Security, Wunderlich, Jon
  • [WEB SECURITY] Brute Force authentication attack, Schmidt, Albert E
    • Re: [WEB SECURITY] Brute Force authentication attack, Jeremiah Grossman
      • RE: [WEB SECURITY] Brute Force authentication attack, Chris Weber
    • Re: [WEB SECURITY] Brute Force authentication attack, Dr Johann A. Briffa
• [WEB SECURITY] Circuit City Forum Hacked to exploit IE visitors, Jeremiah Grossman
• [WEB SECURITY] Lots of WebAppSec at Black Hat, Jeremiah Grossman
• RE: [WEB SECURITY] WebScurity ->was-> Application Security Hacking Videos, Brent Johnson
  • Re: [WEB SECURITY] WebScurity ->was-> Application Security Hacking Videos, Ivan Ristic
    • RE: [WEB SECURITY] WebScurity ->was-> Application Security Hacking Videos, Brent Johnson
      • Re: [WEB SECURITY] WebScurity ->was-> Application Security Hacking Videos, Ivan Ristic
• [WEB SECURITY] Webappsec feed, RSnake
• [WEB SECURITY] Sample XSS and Flash Web App, arian.evans
• [WEB SECURITY] Salt Storage - web.config or database?, Peluso, Cynthia M.
  • Re: [WEB SECURITY] Salt Storage - web.config or database?, Brian Eaton
  • Re: [WEB SECURITY] Salt Storage - web.config or database?, Marc-André Laverdière
    • Re: [WEB SECURITY] Salt Storage - web.config or database?, Brian Eaton
      • Re: [WEB SECURITY] Salt Storage - web.config or database?, Marc-André Laverdière
  • RE: [WEB SECURITY] Salt Storage - web.config or database?, Marian Ion
  • <Possible follow-ups>
  • Re: [WEB SECURITY] Salt Storage - web.config or database?, der wert
    • Re: [WEB SECURITY] Salt Storage - web.config or database?, Brian Eaton
  • RE: [WEB SECURITY] Salt Storage - web.config or database?, Martin O'Neal
  • RE: [WEB SECURITY] Salt Storage - web.config or database?, Marian Ion
  • RE: [WEB SECURITY] Salt Storage - web.config or database?, Martin O'Neal
• RE: [WEB SECURITY] Application Security Hacking Videos, Erez Metula
  • Re: [WEB SECURITY] Application Security Hacking Videos, Paul Schmehl
    • Re: [WEB SECURITY] Application Security Hacking Videos, Ivan Ristic
      • Re: [WEB SECURITY] Application Security Hacking Videos, Paul Schmehl
      • Re: [WEB SECURITY] Application Security Hacking Videos, Brian Eaton
    • Re: [WEB SECURITY] Application Security Hacking Videos, Mike Fratto
      • Re: [WEB SECURITY] Application Security Hacking Videos, Paul Schmehl
      • RE: [WEB SECURITY] Application Security Hacking Videos, Joseph Peloquin
      • Re: [WEB SECURITY] Application Security Hacking Videos, Paul Schmehl
      • Re: [WEB SECURITY] Application Security Hacking Videos, Joel R. Helgeson
  • <Possible follow-ups>
  • Re: [WEB SECURITY] Application Security Hacking Videos, Joel R. Helgeson