Exploitarium mass-drops functional zero-day exploit PoCs

Mass-dropping undisclosed zero-days under the guise of 'education' is irresponsible disclosure that forces a chaotic, reactive patching cycle on open-source maintainers.

* The repository contains functional proof-of-concepts, including a critical remote code execution vulnerability in libssh2 (CVE-2026-55200) that has since been confirmed and patched.

* Encouraging random users to report the bugs and claim CVE credit bypasses responsible disclosure standards and can lead to duplicated or poor-quality reporting.

* Security teams must audit their environments for dependencies like libssh2, Gitea, and c-ares to mitigate risk from these public exploit payloads.