Konrad Pietrzak / Ericsson

inets, httpd: HTTP Request Smuggling via Transfer-Encoding and Content-Length

inets, httpd: HTTP Request Smuggling via Whitespace-Before-Colon Header Dropping i

httpd mod_auth directory protection bypassed by request path casing on case-insensitive filesystems

httpc does not bound server-supplied numeric header values before integer conversion