Hi,
Guest
Search results for all lists
List: tacomaart@list.cityoftacoma.org
From: Tena DuBerry
Listen TODAY @ 3PM... on the Web or Air...
Fri, Jun 24, 2011 8:31 PM
That's *Today @ 3pm*...
on *KLAY 1180 AM* or streaming live on the web at*
www.thetenaduberrywowshow.com*.
*Friday's at 3pm*...
*We'll Meet You There!!!** *
Blessings!!!
List: websecurity@lists.webappsec.org
From: DefenseCode
[WEB SECURITY] DefenseCode ThunderScan SAST Advisory: WordPress Tribulant Slideshow Gallery Plugin - Cross-Site Scripting Vulnerabilities
Mon, Apr 10, 2017 2:23 PM
Subscribe for free software trial on our website
http://www.defensecode.com/
E-mail: defensecode[at]defensecode.com
Website: http://www.defensecode.com/
Twitter: https://twitter.com/DefenseCode/
List: websecurity@lists.webappsec.org
From: The Dead
Re: [WEB SECURITY] 3rd party lib patch management for webapps
Tue, Nov 6, 2012 10:42 AM
.:
>
> https://github.com/gcmurphy/enforce-victims-rule
> and
> https://github.com/jeremylong/DependencyCheck#readme
>
> I agree with Jim that it's not feasible to auto-update in live.
List: websecurity@lists.webappsec.org
From: James Manico
Re: [WEB SECURITY] 3rd party lib patch management for webapps
Tue, Nov 6, 2012 11:14 AM
.:
>
> https://github.com/gcmurphy/enforce-victims-rule
> and
> https://github.com/jeremylong/DependencyCheck#readme
>
> I agree with Jim that it's not feasible to auto-update in live.
List: websecurity@lists.webappsec.org
From: Paul Johnston
Re: [WEB SECURITY] Poll: How do you rank the importance of a vulnerability?
Tue, Feb 5, 2013 10:33 AM
https://wiki.mozilla.org/Security_Severity_Ratings
https://sites.google.com/a/chromium.org/dev/developers/severity-guidelines
Paul
--
Pentest - The Application Security Specialists
Paul Johnston - IT Security Consultant / Tiger SST
PenTest Limited - ISO 9001 (44/100/107029) / ISO 27001 (IS 558982)
Office: +44 (0) 161 233 0100
Mobile: +44 (0) 7817 219 072
List: time-nuts@lists.febo.com
From: Wilko Bulte
Re: GPSDO control programs.
Sat, Jul 12, 2025 8:24 AM
>
> U-blox u-center:
>
> https://www.u-blox.com/en/product/u-center
>
> but I wonder whether it's just a connection issue - baud rate? RS232 vs.
> TTL levels?
List: websecurity@lists.webappsec.org
From: Hafez Kamal
[WEB SECURITY] [HITB-Announce] REMINDER: HITB2011 - Malaysia Call for Papers Closes on the 15th
Mon, Jul 11, 2011 2:43 PM
- The HITB.my Team
---
Hafez Kamal
HITB Crew
Hack in The Box (M) Sdn. Bhd.
Suite 26.3, Level 26, Menara IMC,
No. 8 Jalan Sultan Ismail,
50250 Kuala Lumpur,
Malaysia
Tel: +603-20394724
Fax: +603-20318359
List: wasc-whid@lists.webappsec.org
From: WASC Web Hacking Incidents Database
AUTO: Out Of Office : Michael Y Liu/HBCA/HSBC is out of the office. (returning 03/08/2011)
Mon, Jul 25, 2011 5:48 PM
Si vous n'êtes pas le
destinataire désigné, veuillez nous en aviser immédiatement et
détruire de façon permanente ce courriel ainsi que toute copie de
celui-ci. La transmission de courriel par Internet ne constitue pas
un mode de transmission confidentiel, sécuritaire ou fiable.
List: websecurity@lists.webappsec.org
From: James Manico
Re: [WEB SECURITY] Perimeter appliances for SAML SSO
Sat, Feb 12, 2011 4:56 AM
.
>
> I have also tested against OpenSSO (which I found excessively complex)
> and CAS (very .edu/web oriented).
List: websecurity@lists.webappsec.org
From: Rohit Pitke
Re: [WEB SECURITY] How are you tackling CSRF?
Mon, Apr 25, 2011 8:06 AM
Christey
Cc: web security
Sent: Sun, April 24, 2011 3:28:15 AM
Subject: Re: [WEB SECURITY] How are you tackling CSRF?
Rohit,
Good point about CSRF tokens that are present but not actually validated.
>From your remediation step list, it sounds like you're using your
session token as the CSRF token.