Unpatched ModSecurity vulnerabilities leave web servers open to DOS attacks
portswigger.net