Exploitarium: A Consolidated Archive of Public Vulnerability Research and PoCs
942
Exploitarium is a consolidated open-disclosure archive of vulnerability research and exploit PoCs designed for educational purposes and community reporting.
Security Disclosure
Covers policies, practices, and debates around how software vulnerabilities are disclosed, including coordinated disclosure, embargoes, and responsible reporting norms.
Reading List
VSCode Webview Flaw Enables GitHub Token Theft via github.dev
658
A flaw in VSCode's keyboard event handling allows malicious repositories to steal GitHub tokens on github.dev by automatically installing rogue extensions.
GitHub Investigates Internal Repository Security Breach
633
GitHub is investigating unauthorized access to its internal repositories but reports no current impact on customer data.
Ramp Fixes AI Spreadsheet Data Exfiltration Flaw
128
Ramp's Sheets AI was vulnerable to a prompt injection attack that allowed malicious formulas to exfiltrate private financial data without user approval.
OpenClaw Fixes High-Severity Privilege Escalation Vulnerability
502
OpenClaw version 2026.3.28 fixes a critical authorization flaw that allowed users to escalate their privileges to admin via the device pairing process.
Unredacted Disclosure: Critical Jailbreak and Sandbox Vulnerabilities in Claude 4.6 Models
A security researcher has publicly disclosed critical jailbreak and data exfiltration vulnerabilities in Anthropic's Claude models following the company's failure to respond to private reports.
The Death of the Security Embargo: Navigating the Kernel's Bug Surge
313
A massive influx of valid security reports is ending the era of secret embargoes and forcing a shift toward continuous software maintenance.