Exploitarium: Inside the Archive Behind the Mass 0-Day Drop

Exploitarium is an ongoing, publicly visible archive that released a large set of proof-of-concept disclosures (35 tracked project folders, ~204 files) without coordinated vendor notification; its most consequential finding is CVE-2026-55200, a pre-auth out-of-bounds write in libssh2 with broad transitive reach (curl, Git, PHP builds). The repository has continued to grow after initial publication, accepts external contributions, applies integrity verification to its contents, and creates sustained supply-chain and triage risk for defenders who must prioritize patching and detection by reachability and blast radius rather than by reported exploitation.