When you need a vulnerability to exploit, but there isn't one... why not simply bring your own, along with your malware?