📦 Hiawatha

An HTTP request smuggling vulnerability in Hiawatha webserver version 11.7 allows unauthenticated attackers to bypass security controls and access restricted resources. This affects all systems runnin...

A timing attack vulnerability exists in Hiawatha webserver version 11.7's Tomahawk management client authentication due to use of strcmp for password comparison. This allows a local attacker to potent...