The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2025-68566: Improper Neutralization of Input During Web Page Generation5.9 MediumN/A0%Dec 24, 2025
CVE-2025-68565: Missing Authorization5.3 MediumN/A0%Dec 24, 2025
CVE-2025-68563: Improper Control of Filename for Include/Require Statement in PHP Program7.5 HighN/A0%Dec 24, 2025
CVE-2025-68540: Improper Control of Filename for Include/Require Statement in PHP Program7.5 HighN/A0%Dec 24, 2025
CVE-2025-68537: Improper Control of Filename for Include/Require Statement in PHP Program7.5 HighN/A0%Dec 24, 2025
CVE-2025-68535: Missing Authorization4.3 MediumN/A0%Dec 24, 2025
CVE-2025-68533: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Dec 24, 2025
CVE-2025-68532: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Dec 24, 2025
CVE-2025-68530: Improper Control of Filename for Include/Require Statement in PHP Program7.5 HighN/A0%Dec 24, 2025
CVE-2025-68529: Cross-Site Request Forgery (CSRF)4.3 MediumN/A0%Dec 24, 2025
CVE-2025-68528: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Dec 24, 2025
CVE-2025-68527: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Dec 24, 2025
CVE-2025-68525: Improper Neutralization of Input During Web Page Generation5.9 MediumN/A0%Dec 24, 2025
CVE-2025-68523: Missing Authorization4.3 MediumN/A0%Dec 24, 2025
CVE-2025-68522: Missing Authorization4.3 MediumN/A0%Dec 24, 2025
CVE-2025-68521: Missing Authorization5.3 MediumN/A0%Dec 24, 2025
CVE-2025-68519: Improper Neutralization of Special Elements used in an SQL Command8.5 HighN/A0%Dec 24, 2025
CVE-2025-68517: Missing Authorization5.4 MediumN/A0%Dec 24, 2025
CVE-2025-68516: Insertion of Sensitive Information Into Sent Data5.0 MediumN/A0%Dec 24, 2025
CVE-2025-68513: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Dec 24, 2025
CVE-2025-68512: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Dec 24, 2025
CVE-2025-68511: Missing Authorization6.5 MediumN/A0%Dec 24, 2025
CVE-2025-68509: URL Redirection to Untrusted Site4.7 MediumN/A1%Dec 24, 2025
CVE-2025-68508: Missing Authorization5.3 MediumN/A0%Dec 24, 2025
CVE-2025-68506: Improper Control of Filename for Include/Require Statement in PHP Program8.1 HighN/A0%Dec 24, 2025
79301-79325 of 399456
‹›