4ra1n, pyn3rd and unam4

Apache HTTP Server: mod_proxy_ftp PASV address handling

Apache HTTP Server: mod_heartmonitor denial of service

Apache Tomcat: Servlet role references can bypass declarative role constraints

Apache Tomcat: Redirect after FORM auth may bypass method specific constraints

Apache Tomcat: RewriteValve [N] restarts at the second rule and may bypass access control

Apache Tomcat: Limited replay attack possible with DIGEST authentication

Apache Tomcat: Bypass longest prefix security constraint

Apache Portable Runtime Utility: apr-util XML stack recursion crash

Apache Tomcat: DoS via WebSocket chat example