Hacker News Reader

Depends greatly on the context. Selling exploits definitely isn't "straight up illegal". Selling vulns much less so.

Yes, sorry, my statement was lacking context. I was referring to someone selling to a criminal organisation.

Not necessarily. Knowingly selling to someone that'll use it for a crime, probably.