“Please do not abuse these. I do this so to allure people into the field, and I’ve always found this is the most efficient way.”

An anonymous account is dumping working exploits for undisclosed bugs and telling readers to go file the CVEs themselves. The “please don’t abuse these” disclaimer is doing a lot of work next to a folder of live proof-of-concepts. Call it recruitment, call it a zero-day fire sale. Either way the vendors who sat on these bugs are the ones who created the conditions for a stranger to do this. Responsible disclosure only works when the other side bothers to respond.