There absolutely is. I'm just not familiar with one that buys these vulnerabilities.