Anonymous researcher drops 0-day 'exploitarium' repo

An anonymous researcher (alias "bikini") published an "exploitarium" repository claiming working exploit code for zero-day vulnerabilities across multiple open-source projects (libssh2, Gitea, Splunk, RustDesk, 7-Zip, VLC, AnyDesk, OpenVPN, c-ares, and others). At least two critical flaws — a pre-auth remote code execution in libssh2 and a Docker backend privilege-bypass/container escape in Gitea — have been independently verified with active exploitation observed; some patches have been merged but PoC availability increases the risk of wider attacks.