Security firms pay between $2,000 to $10,000 for a bug that can be sold on the black market. The more targets a bug can hit if it’s converted into an exploit and let loose in the wild, the more it pays. Security firms who buy bugs say they are careful about who they deal with. The practice of selling bugs for money has its ethical dilemma, too, says one researcher. The bug hunters and bug hunters are among the most prolific sellers in the world.”]
Source: https://www.darkreading.com/analytics/bucks-for-bugs