https://hackingpassion.com/tags/vulnerability-disclosure/Recent content in Vulnerability-Disclosure on HackingPassion.com : root@HackingPassion.com-[~]HugoenWed, 22 Jul 2026 15:01:21 +0200https://hackingpassion.com/exploitarium-github-zero-day-dump/Wed, 22 Jul 2026 15:01:21 +0200https://hackingpassion.com/exploitarium-github-zero-day-dump/<p>Someone published <strong>204 exploit files</strong> on GitHub for software you almost certainly use, and told the vendors nothing. The makers found out the same way the attackers did, by reading the page. 🧐</p> <p>The account goes by <strong>bikini</strong>. The project is called <code>exploitarium</code>, a single archive of ready-to-run exploit code for software that sits underneath much of what you use. The first dated entries go back to <strong>June 23</strong>, and by <strong>June 27</strong> the page was pulling in stars and hundreds of comments, which meant defenders and attackers were reading the same exploits at the same moment.</p>https://hackingpassion.com/nightmare-eclipse-microsoft-zero-day-war/Sun, 31 May 2026 15:08:03 +0200https://hackingpassion.com/nightmare-eclipse-microsoft-zero-day-war/<p>Six working Windows attacks are sitting in the open right now, three of them already seen in a real intrusion, and the researcher who published them did it after he says Microsoft refused him, deleted the account he reported bugs through, and paid him nothing. Microsoft removed his account, called his actions criminal, and pointed at its crime unit. Both stories are out there, and the security world cannot agree on who is more to blame.</p>