Index
Search
Search the public record. Drafts and scheduled notes are not included.
CVE-2026-15176
NGINX alias with rewrite heap buffer overflow in worker process
RCE
Published 16h ago
research
Visual Studio and SSMS Copilot flaw CVE-2026-103572 allows code execution
Microsoft fixed CVE-2026-103572 on 13 October 2026. A prompt-injected GitHub Copilot in Visual Studio or SSMS could rewrite its own config and run code. CVSS 3.1 8.8 (Important, scored by Microsoft). Fixed in Visual Studio 2022 17.14.42 and 2026 18.10.4. Researcher PoC public. Not exploited, not in CISA KEV.
Published 23h ago
CVE-2026-103572
Visual Studio and SSMS GitHub Copilot code injection RCE
RCE
Published 2d ago
research
XRPL payment engine overflow could have minted XRP
XRPL disclosed a critical integer overflow in the XRP Ledger payment engine, present since the 2015 rewrite. Crafted offers plus one payment could have created spendable XRP beyond the 100 billion supply cap. Veria Labs says its AI found it; RippleX shipped xrpld 3.4.1 in three days. No mainnet exploitation found. No CVE.
Published 3d ago