CVE Series

Reduce risk and keep adversaries out of your environment with hands-on training built around the latest vulnerabilities and exploits.

Start Learning for Free
Cybrary for Business
Start Learning for Free
Cybrary for Business

Protect Your Environment

Our CVE series lets you experience critical vulnerabilities through interactive courses and secure virtual environments to develop the skills necessary to mitigate risk.

Start Learning for Free

Explore CVEs From Every Angle

Be Ready to Respond

As high-impact security flaws are discovered and exploited by adversaries in the wild, develop the skills you need to reduce risk. Subscribe to our CVE Series to be the first to know when new courses are available.

View All
Course
Free
1
H:
0
M
1
 CEUS

CVE Series: Openfire (CVE-2023-32315)

If you're a cybersecurity practitioner who wants to know more about how to exploit and defend against CVE-2023-32315 (Openfire Path Traversal to RCE), you won't want to miss this course. You will identify the vulnerability, exploit it, and mitigate it in a hands-on, secure lab environment. Don't let Openfire catch you off guard.
Learn More & Enroll
Course
1
H:
20
M
2
 CEUS

CVE Series: Dirty Pipe (CVE-2022-0847)

Dirty Pipe (CVE-2022-0847) is the most critical vulnerability to impact Linux distributions in years. By exploiting this local kernel flaw, adversaries can quickly escalate privileges and even gain root access. Exploit and mitigate this vulnerability in this hands-on course that gives you the skills you need to protect your organization.
Learn More & Enroll
Course
Free
1
H:
15
M
2
 CEUS

CVE Series: Polkit (CVE-2021-4034)

The Polkit vulnerability (CVE-2021-4034) is a critical vulnerability impacting every major Linux distribution. Its attack vector allows privilege escalation and can even give the attacker root access. Exploit and mitigate this vulnerability in this hands-on course that gives you the skills you need to protect your organization.
Learn More & Enroll
Course
1
H:
45
M
2
 CEUS

CVE Series: Log4J (CVE-2021-44228)

The Log4J vulnerability (CVE-2021-44228) took the world by storm in late 2021. Do you have what it takes to exploit and mitigate this critical vulnerability that experts say had the biggest global impact since Shellshock? Find out in this course, where you'll put your defensive and pen testing skills to the ultimate test in a virtual lab.
Learn More & Enroll
Course
1
H:
47
M
2
 CEUS

CVE Series: MSHTML Vulnerability (CVE-2021-40444)

The MSHTML Windows remote code execution vulnerability (CVE-2021-40444) identified in September 2021 could allow a threat actor to execute code on a victim’s machine. In this advanced course, you will exploit and mitigate this vulnerability in a secure lab environment, giving you the skills you need to protect your organization.
Learn More & Enroll
Course
1
H:
0
M
1
 CEUS

CVE Series: PrintNightmare (CVE-2021-1675 and CVE-2021-34527)

PrintNightmare (CVE-2021-1675 and CVE-2021-34527) is a critical vulnerability in the Windows Print Spooler service running on almost every Windows operating system. Dive into a hands-on lab and course where you will exploit and mitigate the vulnerability. Don't get caught unaware by PrintNightmare.
Learn More & Enroll
Course
0
H:
20
M
2
 CEUS

CVE Series: CouchDB RCE (CVE-2022-24706)

The Apache CouchDB Remote Code Execution (RCE) vulnerability (CVE-2022-24706) is a critical flaw impacting Couch databases and has been known to be exploited in the wild. Learn how to exploit and mitigate this vulnerability today!
Learn More & Enroll
Course
1
H:
20
M
2
 CEUS

CVE Series: Atlassian Bitbucket Command Injection (CVE-2022-36804)

The Atlassian Bitbucket command injection flaw (CVE-2022-36804) is a remote, unauthenticated, command injection vulnerability affecting application programming interface (API) endpoints in Bitbucket Server and Data Center. Stop an attacker from stealing sensitive information or installing malware as you exploit and mitigate this vulnerability!
Learn More & Enroll
Course
1
H:
5
M
1
 CEUS

CVE Series: Grafana Directory Traversal (CVE-2021-43798)

The Grafana Directory Traversal vulnerability (CVE-2021-43798) is a critical arbitrary file reading vulnerability impacting global Grafana servers and has been exploited in the wild. Take this course to learn how to exploit and mitigate this vulnerability!
Learn More & Enroll
Course
0
H:
40
M
1
 CEUS

CVE Series: Apache HTTPD (CVE-2021-42013)

The Apache HTTPD vulnerability (CVE-2021-42013) is a critical flaw impacting servers across the globe. This vulnerability gives an attacker the ability to enumerate a system and execute commands on the victim system if exploited. Exploit and mitigate the vulnerability in a secure lab environment!
Learn More & Enroll
Course
1
H:
15
M
2
 CEUS

CVE Series: Django (CVE-2022-34265)

Django is a Python-based web framework design for fast, easy application creation. Popular apps like Instagram and Clubhouse use Django, but are you prepared to exploit and mitigate the high-risk Django flaw (CVE-2022-34265) that leaves applications vulnerable to SQL injection attacks? Put your pentest skills to the test in our course!
Learn More & Enroll
Course
1
H:
50
M
2
 CEUS

CVE Series: Follina (CVE-2022-30190)

The Follina exploit (CVE-2022-30190) is a Windows Remote Code Execution (RCE) vulnerability that could allow a threat actor to acquire an initial level of access after a successful phishing attack. Take our course to gain the skills you need to identify the vulnerability, detect it, and mitigate it (with current best knowledge).
Learn More & Enroll
Course
1
H:
20
M
2
 CEUS

CVE Series: Confluence RCE (CVE-2022-26134)

CVE-2022-26134 is an Object-Graph Navigation Language (OGNL) injection flaw impacting Atlassian Confluence & Data Center software. Leveraging this remote code injection (RCE) flaw, adversaries can execute arbitrary code on a server. Atlassian tools are popular with more remote work, so mitigation is key. Exploit, detect, & mitigate this flaw!
Learn More & Enroll
Course
1
H:
20
M
2
 CEUS

CVE Series: Redis (CVE-2022-0543)

The Redis vulnerability (CVE-2022-0543) is a critical flaw impacting Linux systems across the globe. By exploiting this vulnerability, any user can remotely execute commands as a root user on a system. Take our course to exploit and mitigate the vulnerability in a secure lab environment, giving you the skills you need to protect your organization.
Learn More & Enroll
Course
0
H:
45
M
1
 CEUS

CVE Series: Spring4Shell (CVE-2022-22965)

Spring4Shell (CVE-2022-22965) is a critical Remote Code Execution (RCE) vulnerability affecting Spring, a common application framework library used by Java developers. You will exploit and mitigate this vulnerability in a virtual lab, giving you the skills you need to “Spring” into action and protect your organization!
Learn More & Enroll

Empower Your Team, Protect Your Organization

Empower your team to detect and mitigate cybersecurity threats with Cybrary. Request a demo today for access to hands-on practice labs, assessments, custom content, and more.

Schedule a Demo