[PenguinCoder]

Various websites, shady forums, tor sites, and 'hacker spaces'. Sometimes that includes white/gray hat haunts for exploit code. Pastebin like sites, github.com, etc. 'darkweb' and OSINT searches. If there is a know vuln, there is someone out there eager to be 'first' to writing exploit code and showing off.

[gtirloni]

Any place where a concrete list of such resources can be found?

[jdeca568]

Here is one: https://www.exploit-db.com/.

But this CVE doesn't appear to be referenced at the moment.