there's more than one buyer out there for vulns