Orange Tsai (@orange_8361) from DEVCORE

Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF

Apache HTTP Server: HTTP response splitting

Apache HTTP Server: mod_rewrite proxy handler substitution

Apache HTTP Server: Crash resulting in Denial of Service in mod_proxy via a malicious request

Apache HTTP Server may use exploitable/malicious backend application output to run local handlers via internal redirect

Apache HTTP Server weakness in mod_rewrite when first segment of substitution matches filesystem path.

Apache HTTP Server weakness with encoded question marks in backreferences

Apache HTTP Server proxy encoding problem

Apache HTTP Server on WIndows UNC SSRF