cve-2026-34473-unauthenticated-dos-zte-routers

CVE-2026-34473: ZTEルーターにおける認証不要のサービス拒否（DoS）脆弱性（全世界14万台以上のデバイス、17機種以上に影響） CVE-2026-34473の技術的な内訳。元の開示セットおよびファームウェア解析成果物から公開。 ライブサイト： https://minanagehsalalma.github.io/cve-2026-34473-unauthenticated-dos-zte-routers/ このリポジトリの焦点： 巨大なapplication/x-www-form-urlencoded POSTリクエストによる認証不要のサービス拒否。...

Python Library Tornado < 6.5.8 DoS (CVE-2026-82397)

The version of the Tornado Python package installed on the remote host is prior to 6.5.8. It is, therefore, affected by a denial of service vulnerability: - Tornado is a Python web framework and asynchronous networking library. Prior to 6.5.8, Tornado parses application/x-www-form-urlencoded...

EUVD-2026-68892

Tornado: Urlencoded body parsing omits maxnumfields, so one request can stall the event loop...

SUSE CVE-2026-82397

Tornado is a Python web framework and asynchronous networking library. Prior to 6.5.8, Tornado parses application/x-www-form-urlencoded request bodies with urllib.parse.parseqs in tornado/escape.py without passing maxnumfields. RequestHandler.execute in tornado/web.py parses the body before handl...

CVE-2026-82397 Tornado: Urlencoded body parsing omits max_num_fields, so one request can stall the event loop

Tornado is a Python web framework and asynchronous networking library. Prior to 6.5.8, Tornado parses application/x-www-form-urlencoded request bodies with urllib.parse.parseqs in tornado/escape.py without passing maxnumfields. RequestHandler.execute in tornado/web.py parses the body before handl...