TLDR Tech / InfoSec
Anonymous Researcher Drops 0-day 'Exploitarium' Repo
An anonymous researcher known as "bikini" published a repository named "exploitarium" containing zero-day exploit write-ups for multiple software products, including active exploitation of CVE-2026-55200 in libssh2 and CVE-2026-20896 in Gitea Docker deployments, without prior vendor notification. The vulnerabilities detailed are a pre-auth heap corruption remote code execution flaw in libssh2 and an authentication bypass in Gitea, both of which are currently unpatched. Defenders should monitor SSH and Git service logs for anomalous activity and block exploitation attempts targeting libssh2 and Gitea until official patches are released.
Read the full story