EIP-2026-104044

The exploit describes multiple information-disclosure vulnerabilities in OSU HTTP server versions 3.11a and 3.10a. It demonstrates path disclosure via a non-existent file request and file/directory disclosure via a malformed URL path. No functional exploit code is provided, but technical details of the vulnerability are outlined.