> Is there an eval for this and if there is why can't they just make it public?
For the same reason the CIA doesn't publish the Windows exploits it finds?