Interactive Concept
Vulnerability Lifecycle
CVE lifecycle: discovery → analysis → ID assignment → public disclosure → vendor patches → deployment
New CVE write-ups are added automatically as they're disclosed — pulled from the National Vulnerability Database (NVD) feed and written up by ITVedas — alongside hand-picked historical CVEs that are worth understanding even years later.
CVE Write-ups
All entries
Apache httpd RCE: Memory Corruption in mod_proxy Header Handling
Read write-up →Docker Container Escape: Privilege Escalation Through Cgroup Management
Read write-up →CPU Vulnerability Deep-Dive: Spectre & Meltdown Updates for 2026
Read write-up →Log4Shell Explained: The Log4j Bug That Broke the Internet
Read write-up →Heartbleed Explained: How a Missing Check Leaked the Internet's Secrets
Read write-up →EternalBlue Explained: The Windows Bug Behind WannaCry
Read write-up →ProxyLogon Explained: The Exchange Server Bug Exploited Before a Patch Existed
Read write-up →PrintNightmare Explained: How the Windows Print Spooler Became a Backdoor
Read write-up →Zerologon Explained: How a Math Mistake Could Hand Over a Windows Domain
Read write-up →CVE-2017-5638 Explained: The Apache Struts Bug Behind the Equifax Breach
Read write-up →Shellshock Explained: The Bash Bug That Hid in Plain Sight for 25 Years
Read write-up →Explore other chapters