The Web Security Mailing List (2007 July)

• Date Index

• [WEB SECURITY] *****SPAM***** New Wordpress 2.2.1 Vulnerabilities and the First Weblog XSS Worm, mybeni websecurity
• [WEB SECURITY] List slowdown during blackhat, robert
• [WEB SECURITY] False Positives with .NET's Request Validation?, David Felio
  • Re: [WEB SECURITY] False Positives with .NET's Request Validation?, Arian J. Evans
    • Re: [WEB SECURITY] False Positives with .NET's Request Validation?, James Landis
• [WEB SECURITY] Blackhat presenter denied entry to US, bugtraq
• [WEB SECURITY] attribute based XSS, Brian Eaton
  • Re: [WEB SECURITY] attribute based XSS, Stefan Esser
  • Re: [WEB SECURITY] attribute based XSS, Arian J. Evans
• [WEB SECURITY] Persistent HTML Injection, Yiannis Pavlosoglou
• [WEB SECURITY] [SecNiche Security] WAZ (v 1.0) : Windows Anti Zomb Killer Released, Aditya K Sood
• [WEB SECURITY] Re: [Full-disclosure] Am I missing anything ?, David Byrne
• [WEB SECURITY] Am I missing anything ?, Deeþàn Chakravarthÿ
  • [WEB SECURITY] Re: [Full-disclosure] Am I missing anything ?, bugtraq
  • [WEB SECURITY] Re: [Full-disclosure] Am I missing anything ?, Valdis . Kletnieks
  • [WEB SECURITY] Re: [Full-disclosure] Am I missing anything ?, Trancer
  • [WEB SECURITY] RE: [Full-disclosure] Am I missing anything ?, J. Patterson Wicks
  • Re: [WEB SECURITY] Am I missing anything ?, kwestin
  • [WEB SECURITY] Re: [Full-disclosure] Am I missing anything ?, Steven Adair
  • [WEB SECURITY] Re: [Full-disclosure] Am I missing anything ?, Simon Smith
• [WEB SECURITY] new version of XSSDB, pdp (architect)
• [WEB SECURITY] digital stalking, Google SearchHistory RSS Interface, pdp (architect)
  • Re: [WEB SECURITY] digital stalking, Google SearchHistory RSS Interface, Greenarrow 1
    • Re: [WEB SECURITY] digital stalking, Google SearchHistory RSS Interface, pdp (architect)
    • Re: [WEB SECURITY] digital stalking, Google SearchHistory RSS Interface, pdp (architect)
• [WEB SECURITY] [CVE-2007-3816][Advisory] JWIG Context-Dependent Template Calling Dos, Aditya K Sood
  • Re: [WEB SECURITY] [CVE-2007-3816][Advisory] JWIG Context-Dependent Template Calling Dos, Bubba Gump
    • Re: [WEB SECURITY] [CVE-2007-3816][Advisory] JWIG Context-Dependent Template Calling Dos, Aditya K Sood
    • Re: [WEB SECURITY] [CVE-2007-3816][Advisory] JWIG Context-Dependent Template Calling Dos, Pranay Kanwar
• [WEB SECURITY] HDIV: Struts 2 Security Plugin, Gorka Vicente
• [WEB SECURITY] SPI Labs finds flaws with Avoid iPhone's web dial, Billy Hoffman
• [WEB SECURITY] Client-side JavaScript XSS Scanner - runs straight from your browser, pdp (architect)
• [WEB SECURITY] Official release of SQL Power Injector 1.2, Francois Larouche
• [WEB SECURITY] JavaScript Spider - Yahoo Site Explorer Spider, pdp (architect)
• [WEB SECURITY] projections - another Web2.0/Security projection, pdp (architect)
• [WEB SECURITY] [MSA01110707] Flash Player/Plugin Video file parsing Remote Code Execution, Minded Security Research Labs
• [WEB SECURITY] The new dawn of filter evasion, pdp (architect)
• [WEB SECURITY] <img src=> aint working, Esteban RibiÄiÄ
  • Message not available
    • Message not available
      • RE: [WEB SECURITY] <img src=> aint working, Matt Fisher
• [WEB SECURITY] XWW - cross webmail Worn - PoC, Rosario Valotta
  • Re: [WEB SECURITY] XWW - cross webmail Worn - PoC, Travis Altman
• [WEB SECURITY] Session hijacking protection, frederic . lebeau
  • AW: [WEB SECURITY] Session hijacking protection, Gabriel Kälin
    • RE: [WEB SECURITY] Session hijacking protection, Boaz Shunami
• [WEB SECURITY] XSSDB Elite (Web2.0 Engineering), pdp (architect)
• [WEB SECURITY] Anti-DNS Pinning and Java Applets, David Byrne
• [WEB SECURITY] Attacking Password Recovery Facilities, pdp (architect)
  • Re: [WEB SECURITY] Attacking Password Recovery Facilities, Esteban RibiÄiÄ
• [WEB SECURITY] Last Week of Reflection - Dinis Cruz, Anurag Agarwal
  • [WEB SECURITY] Secure Programming with Static Analysis, Jacob West
• [WEB SECURITY] Security on AIR: Local file access through JavaScript, fukami
• [WEB SECURITY] The Top 5 most Popular Web2.0 Services Hackers Cannot live Without, pdp (architect)