https://portswigger.net/research/browser-powered-desync-attacks
The recent rise of HTTP Request Smuggling has seen a flood of critical findings enabling near-complete compromise of numerous major websites. However, the...
new frontierhttp requestbrowserpowereddesync
https://www.bugcrowd.com/blog/unveiling-te-0-http-request-smuggling-discovering-a-critical-vulnerability-in-thousands-of-google-cloud-websites/?utm_source=tldrsec.com&utm_medium=referral&utm_campaign=tl-dr-sec-265-google-s-secure-by-design-web-framework-ai-powered-phishing-how-palantir-secures-source-control
We later discovered we had a powerful exploit affecting thousands of Google Cloud-hosted websites that were using their Load Balancer.
http request smugglingunveilingtediscoveringcritical
https://www.ruby-lang.org/en/news/2020/09/29/http-request-smuggling-cve-2020-25613/
A potential HTTP request smuggling vulnerability in WEBrick was reported. This vulnerability has been assigned the CVE identifier CVE-2020-25613. We strongly...
http request smugglingcvepotentialvulnerabilitywebrick