Field Notes: From Service Version to a Working Exploit
Once you've enumerated a target and know what OS and service versions are running, vulnerability research means checking whether what's installed is actually exploitable. Four acronyms—CWE, CVE, NVD, Exploit-DB—sound interchangeable but aren't.