New Java Exploit Fetches $5,000 Per BuyerLess than 24 hours after Oracle patched a dangerous security hole in its Java software that was being used to seize control over Windows PCs, miscreants in the Underweb were already selling an exploit for a different and apparently still-unpatched zero-day vulnerability in Java, KrebsOnSecurity has learned.
http://krebsonsecurity.com/2013/01/new-java-exploit-fetches-5000-per-buyer/