First rule of reporting exploits: report it privately and don't tell people how to reproduce it.