If I want Cisco to patch the vuln that some small player is exploiting, I can think of better ways to accomplish that than publishing the exploit myself.
Like what? normal disclosure or leaking the exploit to big guys like taviso? nah this won't do shit... cisco will patch and charge you his "premium membership" to download updates and sysadmins won't update now that shit hit the fan and the average kiddie can, cisco will be forced to release the update as free (to protect his stock) and sysadmins will be forced to update asap.