An analysis of criminal forums reveal what publicly known vulnerabilities attackers are most interested in.