The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2025-69009: Missing Authorization5.3 MediumN/A0%Dec 30, 2025
CVE-2025-69008: Improper Neutralization of Input During Web Page Generation5.9 MediumN/A0%Dec 30, 2025
CVE-2025-69007: Improper Neutralization of Input During Web Page Generation5.9 MediumN/A0%Dec 30, 2025
CVE-2025-69006: Improper Neutralization of Input During Web Page Generation5.9 MediumN/A0%Dec 30, 2025
CVE-2025-68998: Cross-Site Request Forgery (CSRF)5.4 MediumN/A0%Dec 30, 2025
CVE-2025-68997: Authorization Bypass Through User-Controlled Key5.3 MediumN/A0%Dec 30, 2025
CVE-2025-68996: Improper Control of Filename for Include/Require Statement in PHP Program7.5 HighN/A0%Dec 30, 2025
CVE-2025-68995: Missing Authorization4.3 MediumN/A0%Dec 30, 2025
CVE-2025-68994: Missing Authorization5.3 MediumN/A0%Dec 30, 2025
CVE-2025-68993: Missing Authorization5.3 MediumN/A0%Dec 30, 2025
CVE-2025-68992: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Dec 30, 2025
CVE-2025-68991: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Dec 30, 2025
CVE-2025-68990: Improper Neutralization of Special Elements used in an SQL Command8.5 HighN/A0%Dec 30, 2025
CVE-2025-68989: Insertion of Sensitive Information Into Sent Data4.3 MediumN/A0%Dec 30, 2025
CVE-2025-68988: Exposure of Sensitive System Information to an Unauthorized Control Sphere5.3 MediumN/A0%Dec 30, 2025
CVE-2025-68987: Improper Control of Filename for Include/Require Statement in PHP Program7.5 HighN/A0%Dec 30, 2025
CVE-2025-68985: Improper Control of Filename for Include/Require Statement in PHP Program7.5 HighN/A0%Dec 30, 2025
CVE-2025-68984: Improper Control of Filename for Include/Require Statement in PHP Program7.5 HighN/A0%Dec 30, 2025
CVE-2025-68983: Improper Control of Filename for Include/Require Statement in PHP Program7.5 HighN/A0%Dec 30, 2025
CVE-2025-68982: Missing Authorization5.3 MediumN/A0%Dec 30, 2025
CVE-2025-68981: Missing Authorization5.3 MediumN/A0%Dec 30, 2025
CVE-2025-68980: Missing Authorization5.3 MediumN/A0%Dec 30, 2025
CVE-2025-68979: Authorization Bypass Through User-Controlled Key5.3 MediumN/A0%Dec 30, 2025
CVE-2025-68978: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Dec 30, 2025
CVE-2025-68977: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Dec 30, 2025
78951-78975 of 402816
‹›