@fluffy @phnt @Goalkeeper @Myshkin @matty @sapphire the real high-value stuff yeah. like web browser exploits were common everywhere a decade ago, now basically only governments use them.
"0 days" is very broad though, there's still tons of stuff out there full of very basic trivially exploitable bugs. I find vulnerabilities that are technically 0 days all the time, just mostly in random shitty software and appliances, instead of like google chrome.
generally the more black-box, there worse it is inside. often no-ones done the effort to look before.