The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2025-67554: Improper Neutralization of Input During Web Page Generation5.9 MediumN/A0%Dec 9, 2025
CVE-2025-67553: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Dec 9, 2025
CVE-2025-67552: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Dec 9, 2025
CVE-2025-67551: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Dec 9, 2025
CVE-2025-67550: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Dec 9, 2025
CVE-2025-67549: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Dec 9, 2025
CVE-2025-67548: Missing Authorization6.5 MediumN/A0%Dec 9, 2025
CVE-2025-67545: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Dec 9, 2025
CVE-2025-67544: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Dec 9, 2025
CVE-2025-67543: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Dec 9, 2025
CVE-2025-67542: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Dec 9, 2025
CVE-2025-67541: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Dec 9, 2025
CVE-2025-67540: Missing Authorization6.5 MediumN/A0%Dec 9, 2025
CVE-2025-67539: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Dec 9, 2025
CVE-2025-67538: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Dec 9, 2025
CVE-2025-67537: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Dec 9, 2025
CVE-2025-67536: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Dec 9, 2025
CVE-2025-67535: Deserialization of Untrusted Data6.6 MediumN/A0%Dec 9, 2025
CVE-2025-67534: Cross-Site Request Forgery (CSRF)7.1 HighN/A0%Dec 9, 2025
CVE-2025-67533: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Dec 9, 2025
CVE-2025-67532: Improper Control of Filename for Include/Require Statement in PHP Program7.5 HighN/A0%Dec 9, 2025
CVE-2025-67531: Improper Control of Filename for Include/Require Statement in PHP Program7.5 HighN/A0%Dec 9, 2025
CVE-2025-67530: Improper Control of Filename for Include/Require Statement in PHP Program7.5 HighN/A0%Dec 9, 2025
CVE-2025-67529: Improper Control of Filename for Include/Require Statement in PHP Program7.5 HighN/A0%Dec 9, 2025
CVE-2025-67528: Improper Control of Filename for Include/Require Statement in PHP Program7.5 HighN/A0%Dec 9, 2025
80876-80900 of 404092
‹›