The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2025-3448: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%Oct 7, 2025
CVE-2025-1826: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Oct 7, 2025
CVE-2025-56243: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Oct 7, 2025
CVE-2025-60312: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Oct 7, 2025
CVE-2025-61778: Authentication Bypass by SpoofingN/A9.3 Critical0%Oct 6, 2025
CVE-2025-61769: Improper Neutralization of Input During Web Page Generation6.1 Medium2.1 Low0%Oct 6, 2025
CVE-2023-49886: Deserialization of Untrusted Data9.8 CriticalN/A1%Oct 6, 2025
CVE-2025-61198: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Oct 6, 2025
CVE-2025-9913: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Oct 6, 2025
CVE-2025-11321: Authorization Bypass Through User-Controlled Key4.3 Medium2.1 Low0%Oct 6, 2025
CVE-2025-11320: Unrestricted Upload of File with Dangerous Type6.3 Medium2.1 Low0%Oct 6, 2025
CVE-2025-11289: Improper Neutralization of Input During Web Page Generation5.4 Medium1.9 Low0%Oct 5, 2025
CVE-2025-61681: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Oct 3, 2025
CVE-2025-53354: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Oct 3, 2025
CVE-2025-60454: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Oct 3, 2025
CVE-2025-60453: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Oct 3, 2025
CVE-2025-60452: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Oct 3, 2025
CVE-2025-60451: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Oct 3, 2025
CVE-2025-60450: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Oct 3, 2025
CVE-2025-60448: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Oct 3, 2025
CVE-2025-60447: Improper Neutralization of Input During Web Page Generation5.9 MediumN/A0%Oct 3, 2025
CVE-2025-60445: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Oct 3, 2025
CVE-2025-61599: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Oct 3, 2025
CVE-2025-61597: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Oct 3, 2025
CVE-2025-11241: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)6.4 MediumN/A0%Oct 3, 2025
4901-4925 of 16533
‹›