PT-2026-63308

Name of the Vulnerable Software and Affected Versions Gitea affected versions not specified Description An authenticated low-privilege user can perform a server-side request forgery SSRF during repository migration. The issue occurs because the validation logic in services/migrations/migrate.go...

CVE-2025-61639

CVE-2025-61639 affects Wikimedia Foundation MediaWiki and concerns exposure of sensitive information to an unauthorized actor. The issue involves files in includes/logging/ManualLogEntry.Php, includes/recentchanges/RecentChangeFactory.Php, and includes/recentchanges/RecentChangeStore.Php, with af...

GO-2024-2572 Missing BlockedAddressed Validation in Vesting Module in github.com/cosmos/cosmos-sdk

Missing BlockedAddressed Validation in Vesting Module in github.com/cosmos/cosmos-sdk...

A user with the BURNER_ROLE role should be able to burn rUSDY tokens from the balance of a blocked address

Lines of code Vulnerability details Impact There are functions for blocking users: setBlocklist - setAllowlist - setSanctionsList - Suppose the user has rUSDY tokens. Then it was added to the blocklist. His tokens will then be blocked. There is a burn function where you can burn rUSDY tokens from...