Exploit code already available online The researcher understood that webmasters needed time to patch their systems, and in the vulnerability disclosure he published on his site, refused to post any in-depth details or exploit code.