PT-2025-54992

Уязвимость пакета rs/cors прикладного программного обеспечения ППО ""Аврора Центр"" связана с неограниченным распределением ресурсов. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, вызвать отказ в обслуживании...

PT-2025-54998

Уязвимость библиотеки mapstructure прикладного программного обеспечения ППО "Аврора Центр" связана с неправильной обработкой выходных данных для журналов регистрации. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, получить несанкционированный доступ к защищаемой...

dot-prop Prototype Pollution

The vulnerability of the dot-prop library in application software, Aurora Center, involves uncontrolled changes to object prototypes’ attributes. Exploiting this vulnerability could allow a malicious actor to execute a “prototype contamination” attack...

Aurora Center Loop Exit Condition DoS

The vulnerability of the GoLang development tool used by Aurora Application Software involves executing a loop with an exit condition that is not met. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Aurora Center Application Prototype Pollution

The vulnerability of the Aurora Application Programming Library involves uncontrolled changes to object prototypes’ attributes. Exploiting this vulnerability allows a remote attacker to execute an “infection of the prototype” attack...

node-fetch Prototype Pollution

The vulnerability of the util.setPath function in the node-fetch library of the Aurora Application Software is related to uncontrolled changes to prototype attributes of objects. Exploiting this vulnerability could allow a malicious actor to execute a “prototype pollution” attack...

Apache Thrift DoS

The vulnerability of the Apache Thrift application programming interface at Aurora Center is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to cause service failures...

hapi uncontrolled resource consumption DoS

The vulnerability of the @hapi/hapi application software library in Aurora Center is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow attackers to cause service failures...

Aurora Center Application Prototype Pollution

The vulnerability of the Aurora Application Library is related to uncontrolled changes to object prototypes’ attributes. Exploiting this vulnerability allows a remote attacker to execute an “infection of the prototype” attack...

lodash uncontrolled resource consumption DoS

The vulnerability of the toNumber, trim, and trimEnd functions in the lodash library for application software from Aurora Center involves an uncontrolled consumption of resources. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Apache Thrift Uncontrolled Resource Consumption DoS

The vulnerability of the Apache Thrift application programming interface at Aurora Center is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures by sending a large number of short messages...

yargs-parser Prototype Pollution

The vulnerability of the yargs-parser library in application software developed by Avora Center relates to uncontrolled changes to object prototypes’ attributes. Exploiting this vulnerability could allow a malicious actor to execute a “prototype compromise” attack...

Aurora Center Application Software Library Resource Consumption DoS

The vulnerability of the Aurora Center’s application software library, related to uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Lodash Command Injection

The vulnerability of the Lodash application library in Aurora Software Solutions relates to the failure to take measures to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

Axios Application SSRF

The vulnerability of the Axios application software Autora Center relates to insufficient checking of incoming requests. Exploiting this vulnerability could allow a malicious actor to execute an SSRF attack remotely...

Aurora Center Input Validation DoS

The vulnerability of the kind-of application software library Aurora Center is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Aurora Center serialize-javascript Application Library Heap Buffer Overflow DoS

The vulnerability of the deleteFunctions function in the serialize-javascript application library of Aurora Center is related to code generation control errors. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...