> Ethical Hacking laboratory analyzing CVEs, exploits, CVSS severity, and vulnerability prioritization.
This repository contains **Assignment 2 — Lab Exercise: Understanding Vulnerabilities and Exploits** for the **Ethical Hacking** subject.
The activity focuses on researching real-world vulnerabilities, examining publicly available exploits, understanding the Common Vulnerability Scoring System (CVSS), and learning how security professionals prioritize vulnerabilities based on severity and real-world risk.
- Research and analyze Common Vulnerabilities and Exposures (CVE) entries.
- Identify vulnerability types and potential security impacts.
- Determine whether vulnerabilities have been exploited in the wild.
- Explore publicly available exploit information.
- Understand different types of exploits and attacker gains.
- Understand how CVSS scores are used for vulnerability prioritization.
- Identify factors beyond CVSS that influence security decisions.
Three vulnerabilities were researched and analyzed:
The selected vulnerabilities include memory corruption issues, a Remote Desktop Licensing Service vulnerability, and a Windows Update rollback vulnerability. :contentReference[oaicite:1]{index=1}
## 💥 Part 2 — Exploring the Exploit Database
The activity explored publicly available exploit information associated with the researched CVEs.
For example, **CVE-2024-38063** was analyzed as a remote, zero-click vulnerability capable of leading to Remote Code Execution (RCE), while CVE-2024-38077 was examined in relation to the Remote Desktop Licensing service. :contentReference[oaicite:2]{index=2}
The activity included a breakdown of the **CVSS v3.1 vector string** for CVE-2024-38063:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
