WebApp Sec: by subject

[o0o] Bypassing servlet input validation filters (OWASP Stinger + Struts example)
- Meder Kydyraliev (Aug 13 2007)
[WEB SECURITY] Seeking feedback on proposed security restriction in the browsers
Abstracting DB Schema from Web Forms
Announcement: Releasing CORE GRASP for PHP. An open source, dynamic web application protection system.
Anti-DDoS Appliance with a focus on Web Code Exploits (Comment Spam, and the like)
Exploiting reflected XSS vulnerabilities, where user input must come through HTTP Request headers
- kuza55 (Jul 11 2007)
Login credentials and session id security
- pagvac (Aug 15 2007)
- Javier Fernández-Sanguino (Aug 13 2007)
Owning Big Brother: How to Crack into Axis IP cameras
- Adrian P. (Sep 27 2007)
preventing sign up forms from being used for user enumeration
Procedure for publishing a new vulnerability?
WASC Announcement: 'WASSEC Project' Call for Participants
- announcements_at_webappsec.org (Aug 13 2007)
WASC-Articles Announcement: "The Unexpected SQL Injection" by Alexander "Mordred" Andonov
- announcements_at_webappsec.org (Sep 16 2007)
Windows Vista's gadget API
- Ed Patterson (Sep 18 2007)
- Tim Brown (Sep 17 2007)