The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2025-69088: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Dec 30, 2025
CVE-2025-69034: Improper Control of Filename for Include/Require Statement in PHP Program8.1 HighN/A0%Dec 30, 2025
CVE-2025-69033: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Dec 30, 2025
CVE-2025-69032: Authorization Bypass Through User-Controlled Key5.4 MediumN/A0%Dec 30, 2025
CVE-2025-69031: Missing Authorization5.3 MediumN/A0%Dec 30, 2025
CVE-2025-69030: Authorization Bypass Through User-Controlled Key5.4 MediumN/A0%Dec 30, 2025
CVE-2025-69029: Authorization Bypass Through User-Controlled Key5.4 MediumN/A0%Dec 30, 2025
CVE-2025-69028: Missing Authorization5.3 MediumN/A0%Dec 30, 2025
CVE-2025-69027: Missing Authorization5.3 MediumN/A0%Dec 30, 2025
CVE-2025-69026: Exposure of Sensitive System Information to an Unauthorized Control Sphere4.3 MediumN/A0%Dec 30, 2025
CVE-2025-69025: Exposure of Sensitive System Information to an Unauthorized Control Sphere4.3 MediumN/A0%Dec 30, 2025
CVE-2025-69024: Missing Authorization6.5 MediumN/A0%Dec 30, 2025
CVE-2025-69023: Missing Authorization4.3 MediumN/A0%Dec 30, 2025
CVE-2025-69022: Missing Authorization5.4 MediumN/A0%Dec 30, 2025
CVE-2025-69021: Cross-Site Request Forgery (CSRF)5.4 MediumN/A0%Dec 30, 2025
CVE-2025-69020: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Dec 30, 2025
CVE-2025-69019: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Dec 30, 2025
CVE-2025-69018: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Dec 30, 2025
CVE-2025-69017: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Dec 30, 2025
CVE-2025-69016: Missing Authorization4.3 MediumN/A0%Dec 30, 2025
CVE-2025-69015: Missing Authorization3.8 LowN/A0%Dec 30, 2025
CVE-2025-69014: Server-Side Request Forgery (SSRF)4.9 MediumN/A0%Dec 30, 2025
CVE-2025-69013: Missing Authorization4.3 MediumN/A0%Dec 30, 2025
CVE-2025-69012: Missing Authorization4.3 MediumN/A0%Dec 30, 2025
CVE-2025-69010: Missing Authorization5.3 MediumN/A0%Dec 30, 2025
78926-78950 of 402816
‹›