Researcher Explains Release of Undisclosed Zero
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-55200 | libssh2 1.11.1, fixed in commit 97acf3d, contains an out-of-bounds write vulnerability in ssh2_transport_read() that fails to enforce upper bounds on… | 9.2 | 4% | PoC | |
| CVE-2026-58049 | FFmpeg's RASC video decoder (decode_dlta in libavcodec/rasc.c) performs 32-bit reads and writes at the row cursor before the NEXT_LINE row-boundary check and… | 8.8 | <1% | ||
CVE-2026-58050+1 related CVE | libssh2 through 1.11.1 reads an attacker-controlled 32-bit attribute count from a publickey-subsystem response and uses it in the allocation num_attrs *… | 8.3 | <1% | ||
| CVE-2026-58052 | 7-Zip for Windows through 26.01 fails to preserve the Mark-of-the-Web when extracting a crafted RAR5 archive, because its guard that suppresses an… | 4.8 | <1% | ||
| CVE-2026-58053 | Gitea act_runner with the Docker backend (through act 0.262.0) passes a workflow's container.options string to the Docker job container's HostConfig and, when… | 9.4 | <1% | ||
| CVE-2026-58054 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority | — | — | ||
| CVE-2026-58055 | nghttp2's nghttpx proxy through 1.69.0 forwards an HTTP/1.1 Upgrade request that also carries a Content-Length header and body onto reusable keep-alive backend… | 6.3 | <1% | ||
| CVE-2026-58056 | RustDesk gates incoming control messages on per-capability flags rather than on the session's authorized connection type, and a file-transfer session does not… | 7.2 | <1% | ||
| CVE-2026-58057 | Flowise before 3.1.3 validates Custom MCP stdio environment variables against a denylist using a case-sensitive comparison, so on Windows, where environment… | 2.3 | 2% | PoC ×2 | |
| CVE-2026-58058 | Nmap through 7.99 does not keep the IPv6 extension-header walk within the captured packet in ipv6_get_data_primitive (libnetutil/netutil.cc), so the pointer… | 6.9 | 1% | ||
| CVE-2026-58592 | Ladybird before commit 2f9dc7e contains a dangling-reference memory-safety flaw in its WebAssembly ESM-integration module loader | 8.9 | <1% | ||
| CVE-2026-58593 | NodeBB does not bind the claimed author of an inbound ActivityPub object to the authenticated remote actor | 8.7 | <1% | PoC ×3 |
From the original article
5 min read at infosecurity-magazine.com
A pseudonymous security researcher has released over 30 proof-of-concept exploits for zero-day vulnerabilities in open-source projects without disclosing them to the maintainers first. The dump, called ‘ Exploitarium ,’ was shared publicly on GitHub by an individual going by name ‘bikini’ and ‘ashdfrkl’ on Discord.
By Kevin Poireault · infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.