Full Disclosure: A project is publishing full analyses of AI-discovered 0-days - first batch of 10 with reproducible exploits

Full Disclosure<br>mailing list archives

By Date

By Thread

A project is publishing full analyses of AI-discovered 0-days - first batch of 10 with reproducible exploits

From: zz lin

Date: Tue, 21 Jul 2026 04:13:14 -0500

I came across a project, "0day Rubbish", that states it will continuously<br>disclose 0-day vulnerabilities discovered by an AI-driven research process<br>(a multi-LLM ensemble of Claude, OpenAI, DeepSeek and GLM). For each<br>vulnerability the project publishes a full technical analysis together with<br>a working exploit script and step-by-step reproduction instructions. The<br>project's content is hosted at:

https://0day-rubbish.com/blog

The first batch already covers ten previously undisclosed vulnerabilities<br>across eight enterprise products, ranging from CVSS 7.3 to 9.8. The list<br>below summarises them for the community's awareness.

The vulnerabilities, in descending CVSS order:

1. InterSystems IRIS - FolderManager Property Injection RCE<br>- Product: InterSystems IRIS<br>- Version: 2026.1.0.234.1 (Community Edition); versions sharing the<br>FolderManager / broker surface<br>- CVSS: 9.8 (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)<br>- Class: Unauthenticated remote code execution<br>- Link: https://0day-rubbish.com/blog/intersystems-iris-foldermanager-rce

2. AdRem NetCrunch - Cross-Session Hijack RCE<br>- Product: AdRem NetCrunch (Windows network monitoring)<br>- Version: 16.0.0.8397 RC; versions sharing the Node.js session-reuse path<br>- CVSS: 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)<br>- Class: Unauthenticated remote code execution (SYSTEM)<br>- Link: https://0day-rubbish.com/blog/adrem-netcrunch-session-hijack-rce

3. Altus BluePlant - Hardcoded Credentials RCE<br>- Product: Altus BluePlant (SCADA HMI / ICS software)<br>- Version: 9.1.40; versions sharing the T.InfoService.Service /<br>FileServer.RunProcess path<br>- CVSS: 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)<br>- Class: Unauthenticated remote code execution<br>- Link: https://0day-rubbish.com/blog/altus-blueplant-hardcoded-creds-rce

4. Brekeke SIP Server - Unauthenticated Nashorn JS Engine RCE<br>- Product: Brekeke SIP Server (SIP Proxy / Registrar)<br>- Version: v3.19.1.8p1 (Evaluation Edition); versions sharing the<br>ProvisioningTest bean<br>- CVSS: 9.8 (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)<br>- Class: Unauthenticated remote code execution<br>- Link: https://0day-rubbish.com/blog/brekeke-sip-server-nashorn-rce

5. Brekeke SIP Server - Unauthenticated Zip Slip Webshell RCE<br>- Product: Brekeke SIP Server<br>- Version: v3.19.1.8p1 (Evaluation Edition); versions sharing the<br>ProvisioningModelImport / Zip.extractAll code<br>- CVSS: 9.8 (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)<br>- Class: Unauthenticated remote code execution (Zip Slip)<br>- Link: https://0day-rubbish.com/blog/brekeke-sip-server-zipslip-rce

6. DataSunrise Suite - Email Verification Code Brute Force RCE<br>- Product: DataSunrise Suite<br>- Version: 11.2.17.12820; versions sharing the forgotten-password flow<br>- CVSS: 9.8 (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)<br>- Class: Unauthenticated remote code execution<br>- Link: https://0day-rubbish.com/blog/datasunrise-email-bruteforce-rce

7. Brekeke SIP Server - Authentication Fail-Open Primitive<br>- Product: Brekeke SIP Server<br>- Version: v3.19.1.8p1 (Evaluation Edition); versions sharing the<br>ScopeBean.checkScope() framework<br>- CVSS: 9.1 (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)<br>- Class: Authentication bypass exposing 23 unauthenticated beans<br>- Link: https://0day-rubbish.com/blog/brekeke-sip-server-auth-failopen

8. Acumatica ERP - Customization Publish Webshell RCE<br>- Product: Acumatica ERP (.NET ERP platform)<br>- Version: 2026 R1 (build 26.101.0225); versions sharing the<br>CstRollbackList.WriteFile / CstFileWriter.UpdateFile publish path<br>- CVSS: 8.8 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)<br>- Class: Authenticated remote code execution (webshell via path traversal<br>in customization publish)<br>- Link: https://0day-rubbish.com/blog/acumatica-customization-webshell-rce

9. AdRem NetCrunch - Startup Script RCE<br>- Product: AdRem NetCrunch<br>- Version: 16.0.0.8397 RC; versions exposing the<br>INcStartupScript.SetScriptOptions / INetCrunchServer.RestartNCServer RPC<br>- CVSS: 8.8 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)<br>- Class: Authenticated remote code execution (SYSTEM)<br>- Link: https://0day-rubbish.com/blog/adrem-netcrunch-startup-script-rce

10. Altus iX Developer - XAML Deserialization RCE<br>- Product: Altus iX Developer (SCADA HMI engineering IDE)<br>- Version: 2.53.65422; versions sharing the ScreenXamlSerializer /<br>XamlReader.Load path<br>- CVSS: 7.3 (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)<br>- Class: Local / user-interaction remote code execution via malicious<br>screen file<br>- Link: https://0day-rubbish.com/blog/altus-ix-developer-xaml-rce

Observations on the project's disclosure posture

The project presents its work as defensive security research and, according<br>to its own pages, operates a risk-driven disclosure model: it publishes full<br>root-cause...