Vulnerability markets