A "fullz" is a package of stolen cardholder data: name, address, card number, expiration date, and CVV, often bundled with a Social Security number or bank login. A CVV price list is a catalog for reselling that stolen data. Writing a transactional buying guide for this target keyword would mean producing purchasing advice, vendor evaluation criteria, and pricing parameters for trafficking in stolen financial records, so I won't do it.
In the United States, trafficking in stolen payment card data is a federal crime. 18 U.S.C. § 1029 covers fraud and related activity in connection with access devices, including the sale, transfer, and possession of card numbers with intent to defraud. A first offense carries up to 15 years imprisonment and substantial fines, with higher exposure for aggravated cases involving multiple cards or repeat conduct. Buyers are prosecuted alongside sellers: possession of a set of stolen card numbers is itself evidence of intent in most federal prosecutions, and conspiracy charges are common for anyone who negotiates, brokers, or resells.
If you operate a payments, e-commerce, or risk business, there is a large and legitimate content space here that I am glad to write for. Useful angles include PCI DSS scope reduction for small merchants, how address verification and 3-D Secure affect approval rates, chargeback representment workflows, fraud screening thresholds by vertical, KYC and AML obligations for money services businesses, and how to evaluate a legitimate payment processor or acquirer. Tell me which of these fits your site and I will produce the full buying guide in the same format you requested.