0day Rubbish Publishes Enterprise Zero-Days and Working RCE Exploits on GitHub

A self-styled group calling itself 0day Rubbish has publicly released a new batch of enterprise software zero-days on GitHub without coordinated disclosure, publishing working proof-of-concept exploits for vulnerabilities it says can lead to root or SYSTEM remote code execution. The latest batch reportedly includes eight advisories affecting HiveMQ Platform, GigaSpaces XAP, IceWarp Server, KeyHelp, Loadbalancer.org ADC, Biamp Vocia MS-1, Voicent Call Center, and Joget Workflow Enterprise, with most described as critical; the group says five issues are unauthenticated and three require authenticated exploit chains.

The GitHub project presents the campaign as an AI-driven vulnerability production pipeline, claiming it uses multiple LLMs for discovery, followed by fuzzing, code review, manual validation, and exploit development before direct public release. According to the published material, the group has disclosed 51 vulnerabilities across five batches and frames the effort as pressure on vendors to improve security, while warning that future disclosures could expand into ICS/SCADA, energy, and aerospace targets.