So tricking a user to visit a minified url, using an iframe or other means of getting an authenticated user to visit the link, causes the comment to be deleted. Typically single page web apps using a routing framework like backbone.js may be vulnerable. Blog post: http://erlend.oftedal.no/blog/?blogid=130 Best regards Erlend

The APT malware uses a combination of > > > Web 2.0 hacking techniques like CSRF and click-jacking to make calls > > > to and access private-cloud infrastucture's web interfaces via > > > legitimate private-cloud user's web browsers.

Best wishes & regards, MustLive Administrator of Websecurity web site http://websecurity.com.ua ----- Original Message ----- From: "Sebastian Schinzel" To: "MustLive" Cc: Sent: Friday, February 11, 2011 11:11 AM Subject: Re: [WEB SECURITY] Placing shells (backdoors) at web sites

>> Best Regards, >> Richard >> >> -- >> Richard Hauswald >> Blog: http://tnfstacc.blogspot.com/ >> LinkedIn: http://www.linkedin.com/in/richardhauswald >> Xing: http://www.xing.com/profile/Richard_Hauswald >> >> _______________________________________________ >> The Web Security Mailing List >> >> WebSecurity RSS Feed >> http://www.webappsec.org/rss/websecurity.rss

Subject: Re: [WEB SECURITY] open source web app scanners >> >> Zippy, >> >> There is good list of web app scanners on sectools.org [0] >> You can try w3af [1] and arachni [2] >> >> [0] http://sectools.org/tag/web-scanners/ >> [1] http://w3af.org >> [2] http://arachni-scanner.com/ >> >> On 06/28/2012 04:40 AM, Zippy Zeppoli wrote: >> > Hi List, >> > I was wondering

Office: 26a The Downs, Altrincham, Cheshire, WA14 2PU, UK _______________________________________________ The Web Security Mailing List WebSecurity RSS Feed http://www.webappsec.org/rss/websecurity.rss Join WASC on LinkedIn http://www.linkedin.com/e/gis/83336/4B20E4374DBA WASC on Twitter http://twitter.com/wascupdates websecurity@lists.webappsec.org http

For subscription information visit http://lists.ctbirding.org/mailman/listinfo/ctbirds_lists.ctbirding.org Ross Geredien Good Migrations Photography www.goodmigrationsphoto.com 1-610-850-5035 --------------------------------- Yahoo! oneSearch: Finally, mobile search that gives answers, not web links.

-------------------------------------------------------* *Yasser ABOUKIR** * Phone: +212 6 69 60 64 82 Visit us: *www.yaboukir.com*

For this internet > connection check, I am planning to send an HTTP GET to a web server and > see if it replies with a 200 OK response. > > > > Can I develop such a utility using just PJLIB and PJLIB-UTIL features? > If yes, can anyone please provide some pointers on the approach I should > take for building this?

That one, which was hacked last year. This is >> social network and none of social networks are attending to security. It's >> not the place for polls on web applications security topics ;-).