Practice real, disclosed CVEs - anonymized into hands-on labs. Find the vulnerability yourself, then watch the real CVE resolve into view.