The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2025-14780: Improper Neutralization of Special Elements used in an SQL Command6.3 Medium2.1 Low0%Dec 16, 2025
CVE-2025-14443: Server-Side Request Forgery (SSRF)6.4 MediumN/A0%Dec 16, 2025
CVE-2025-13741: Missing Authorization4.3 MediumN/A0%Dec 16, 2025
CVE-2025-13474: Authorization Bypass Through User-Controlled Key7.5 HighN/A0%Dec 16, 2025
CVE-2025-11220: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Dec 16, 2025
CVE-2025-0836: Missing Authorization6.3 Medium5.3 Medium0%Dec 16, 2025
CVE-2025-14002: Improper Authentication8.1 HighN/A1%Dec 16, 2025
CVE-2025-68088: Missing Authorization5.4 MediumN/A0%Dec 16, 2025
CVE-2025-68087: Missing Authorization5.4 MediumN/A0%Dec 16, 2025
CVE-2025-68086: Missing Authorization5.4 MediumN/A0%Dec 16, 2025
CVE-2025-68085: Missing Authorization5.4 MediumN/A0%Dec 16, 2025
CVE-2025-68084: Missing Authorization5.4 MediumN/A0%Dec 16, 2025
CVE-2025-68083: Cross-Site Request Forgery (CSRF)5.4 MediumN/A0%Dec 16, 2025
CVE-2025-68082: Cross-Site Request Forgery (CSRF)5.4 MediumN/A0%Dec 16, 2025
CVE-2025-68080: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Dec 16, 2025
CVE-2025-68079: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Dec 16, 2025
CVE-2025-68078: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Dec 16, 2025
CVE-2025-68077: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Dec 16, 2025
CVE-2025-68076: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Dec 16, 2025
CVE-2025-68071: Authorization Bypass Through User-Controlled Key6.5 MediumN/A0%Dec 16, 2025
CVE-2025-68070: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Dec 16, 2025
CVE-2025-68068: Improper Control of Filename for Include/Require Statement in PHP Program7.5 HighN/A0%Dec 16, 2025
CVE-2025-68067: Improper Control of Filename for Include/Require Statement in PHP Program7.5 HighN/A0%Dec 16, 2025
CVE-2025-68066: Improper Control of Filename for Include/Require Statement in PHP Program7.5 HighN/A0%Dec 16, 2025
CVE-2025-68065: Improper Control of Filename for Include/Require Statement in PHP Program7.5 HighN/A0%Dec 16, 2025
80276-80300 of 407930
‹›