The Web Security Mailing List (2008 September)

• Date Index

• [WEB SECURITY] [ANN] notmm is not a monolithic mashup 0.2.10 released !, Etienne Robillard
• [WEB SECURITY] MS SQL Server 2008 Reporting Services - built-in http server - security analysis?, Herbener, Martin - KETS Engineering and Management
• [WEB SECURITY] fingerprint survey of the Sand Hill/Page Mill venture capitalist group, Mat Caughron
  • Re: [WEB SECURITY] fingerprint survey of the Sand Hill/Page Mill venture capitalist group, kuza55
• Fwd: [WEB SECURITY] Positive Security Model, Lee Sequeira
  • RE: [WEB SECURITY] Positive Security Model, Boaz Shunami
  • <Possible follow-ups>
  • RE: [WEB SECURITY] Positive Security Model, Lee Sequeira
• Re: [WEB SECURITY] quick question on password reset 'best practices', Tom
• [WEB SECURITY] badstore bits?, Shavian Shakes
  • Re: [WEB SECURITY] badstore bits?, Kurt Roemer
• [WEB SECURITY] [Tool] Scalp - Apache log analyzer for security, romain
• [WEB SECURITY] WASC Threat Classification v2 Project - Call for Participants, robert
• [WEB SECURITY] Bug in Internet Explorer security model when embedding Flash, Guy Aharonovsky
  • Re: [WEB SECURITY] Bug in Internet Explorer security model when embedding Flash, Stefano Di Paola
    • RE: [WEB SECURITY] Bug in Internet Explorer security model when embedding Flash, Guy Aharonovsky
      • [WEB SECURITY] ICal bookmarking .ICS file, KT
      • Re: [WEB SECURITY] ICal bookmarking .ICS file, Simone Onofri
      • RE: [WEB SECURITY] ICal bookmarking .ICS file, GROSS, Bill
      • RE: [WEB SECURITY] ICal bookmarking .ICS file, White, Dain P
• [WEB SECURITY] Advisory: Attack of the Mongolian space evaders... (and other Medieval XSS vectors), Chris Weber
  • Re: [WEB SECURITY] Advisory: Attack of the Mongolian space evaders... (and other Medieval XSS vectors), Bil Corry
    • RE: [WEB SECURITY] Advisory: Attack of the Mongolian space evaders... (and other Medieval XSS vectors), Chris Weber \(Casaba Security\)
• [WEB SECURITY] File uploading vulnerabilities, mike
  • Re: [WEB SECURITY] File uploading vulnerabilities, James Landis
  • Re: [WEB SECURITY] File uploading vulnerabilities, Gleb Paharenko
    • RE: [WEB SECURITY] File uploading vulnerabilities, Boaz Shunami
      • Re: [WEB SECURITY] File uploading vulnerabilities, Bil Corry
  • RE: [WEB SECURITY] File uploading vulnerabilities, Eric Rachner
    • Re: [WEB SECURITY] File uploading vulnerabilities, Bil Corry
    • Re: [WEB SECURITY] File uploading vulnerabilities, Oliver Lavery
  • Re: [WEB SECURITY] File uploading vulnerabilities, Simone Onofri
  • <Possible follow-ups>
  • Re: RE: [WEB SECURITY] File uploading vulnerabilities, mike
    • Re: RE: [WEB SECURITY] File uploading vulnerabilities, Jason Troy
    • RE: RE: [WEB SECURITY] File uploading vulnerabilities, Eric Rachner
      • Re: RE: [WEB SECURITY] File uploading vulnerabilities, vimala anand
    • RE: RE: [WEB SECURITY] File uploading vulnerabilities, Avi Aminov
      • Re: RE: [WEB SECURITY] File uploading vulnerabilities, Guillaume VISSIAN
• [WEB SECURITY] HTMLEncoding in textarea in java, mike
  • RE: [WEB SECURITY] HTMLEncoding in textarea in java, Arshan Dabirsiaghi
    • RE: [WEB SECURITY] HTMLEncoding in textarea in java, Arshan Dabirsiaghi
• [WEB SECURITY] SQL Smuggling, Avi Douglen
• [WEB SECURITY] WASC Announcement: 2007 Web Application Security Statistics Published, statistics
• [WEB SECURITY] IE8 XSS filter and more, Argeniss
• Re: [WEB SECURITY] SEO Code Injection Paper, bugtraq
  • RE: [WEB SECURITY] SEO Code Injection Paper, Hoffman, Billy
  • Re: [WEB SECURITY] SEO Code Injection Paper, Arian J. Evans
  • <Possible follow-ups>
  • RE: [WEB SECURITY] SEO Code Injection Paper, Gunter Ollmann
• Re: [WEB SECURITY] PR08-20: Bypassing ASP .NET "ValidateRequest" for Script Injection Attacks, kuza55
  • Re: [WEB SECURITY] PR08-20: Bypassing ASP .NET "ValidateRequest" for Script Injection Attacks, ProCheckUp Research
• [WEB SECURITY] Security thoughts/concerns with Amazon S3?, Joe White
  • [WEB SECURITY] Re: Security thoughts/concerns with Amazon S3?, Joe White
• [WEB SECURITY] RUXCON 2008 Final Call For Papers, cfp
• [WEB SECURITY] Re: Injection attacks in ASPX/ASP.NET applications, Arian J. Evans
• [WEB SECURITY] Looking for guidelines/best practices about messaging, application.secure application.secure
  • <Possible follow-ups>
  • Re: [WEB SECURITY] Looking for guidelines/best practices about messaging, Christian Eric EDJENGUELE
• [WEB SECURITY] [Tool] sqlmap 0.6 released, Bernardo Damele A. G.
  • [WEB SECURITY] SEO Code Injection Paper, Gunter Ollmann
    • RE: [WEB SECURITY] SEO Code Injection Paper, Martin O'Neal
• Re: [WEB SECURITY] iFrame secure or not, Ory Segal