What We Know
REST OF WORLD:Constitutional Court vote may influence Puigdemont’s arrest warrant and return to CataloniaGAMING:Control Resonant’s launch hotfix eases combat and strengthens Dylan’s early progressionSPORTS:Maple Leafs acquire Kirill Marchenko from Blue Jackets and sign him to six-year extensionMARKETS:August U.S. Inflation Rose Less Than Expected as Spending Stayed Strong and Price Pressures PersistedCYBERSECURITY:Citrix NetScaler zero-days prompt global alerts and urgent mitigation effortsPOLITICS:Iran-US Nuclear and Hormuz Discussions Continue Amid Mediation and Doubts Over a DealAI:The EU advances AI Act enforcement as draft rules and provider letters emergeTOP STORIES:Ukraine develops affordable interceptor drones as jet-powered threats expose defense gapsREST OF WORLD:Constitutional Court vote may influence Puigdemont’s arrest warrant and return to CataloniaGAMING:Control Resonant’s launch hotfix eases combat and strengthens Dylan’s early progressionSPORTS:Maple Leafs acquire Kirill Marchenko from Blue Jackets and sign him to six-year extensionMARKETS:August U.S. Inflation Rose Less Than Expected as Spending Stayed Strong and Price Pressures PersistedCYBERSECURITY:Citrix NetScaler zero-days prompt global alerts and urgent mitigation effortsPOLITICS:Iran-US Nuclear and Hormuz Discussions Continue Amid Mediation and Doubts Over a DealAI:The EU advances AI Act enforcement as draft rules and provider letters emergeTOP STORIES:Ukraine develops affordable interceptor drones as jet-powered threats expose defense gaps
← Back to feed
Older than 2 weeksJust now

Anonymous GitHub account mass-dropping undisclosed 0-days | Hacker News

  • 4 sources analyzed
  • Source mix: Web
  • Momentum: Older than 2 weeks

What We Know

An anonymous GitHub account using the handle “bikini” published a repository named Exploitarium that collects a large set of previously undisclosed proof‑of‑concept (PoC) exploits. Reporting summarizes the collection as roughly 130+ PoCs spanning about 22 different software projects and notes the poster did not notify vendors before release; two of the published items have been described as critical in one writeup.

Community reviewers have begun looking through the submissions. A Hacker News commenter who inspected the Ghidra‑related entries found some of those PoCs unimpressive and noted at least one requires being able to overwrite local binaries in a development toolchain, which limits its practical exploitability. A Dev.to post and other writeups are guiding readers through the repository and raising discussion about the releases. The GitHub repository itself is publicly accessible at the linked Exploitarium page.

Source Comparison

Aligned reporting
4 corroborates - 0 adds context - 0 conflicts