Kristian Erik Hermansen has disclosed a zero-day vulnerability in FireEye’s core product. If exploited, the vulnerability results in unauthorized file disclosure. He also posted a brief example of how to trigger the vulnerability and a copy of the /etc/passwd file. He claims to have three other vulnerabilities, and says they’re for sale. FireEye has issued a brief statement to Salted Hash, saying they’re aware of the vulnerabilities and asking for $10,000 per bug.”]