Caught in Transit: A Deep Dive into Two HTTP Request Smuggling Vulnerabilities