Anonymous 'exploitarium' repo drops 130 zero‑days, two critical now
An anonymous GitHub researcher (bikini) released 'exploitarium', a repo with 130+ zero‑day PoCs across 22 projects. Two exploits—libssh2 CVE‑2026‑55200 (pre‑auth RCE, CVSS 9.2) and Gitea CVE‑2026‑20896 (authentication bypass)—are already being weaponised. The dump skips coordinated disclosure, giving defenders and attackers simultaneous access.