The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2025-64283: Authorization Bypass Through User-Controlled Key6.5 MediumN/A0%Oct 29, 2025
CVE-2025-64234: Missing Authorization4.3 MediumN/A0%Oct 29, 2025
CVE-2025-64229: Missing Authorization4.3 MediumN/A0%Oct 29, 2025
CVE-2025-64228: Exposure of Sensitive System Information to an Unauthorized Control Sphere4.3 MediumN/A0%Oct 29, 2025
CVE-2025-64226: Cross-Site Request Forgery (CSRF)4.3 MediumN/A0%Oct 29, 2025
CVE-2025-64220: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Oct 29, 2025
CVE-2025-64219: Missing Authorization4.3 MediumN/A0%Oct 29, 2025
CVE-2025-64216: Improper Control of Filename for Include/Require Statement in PHP Program7.5 HighN/A0%Oct 29, 2025
CVE-2025-64212: Missing Authorization5.4 MediumN/A0%Oct 29, 2025
CVE-2025-64211: Missing Authorization5.3 MediumN/A0%Oct 29, 2025
CVE-2025-64210: Missing Authorization5.4 MediumN/A0%Oct 29, 2025
CVE-2025-64208: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Oct 29, 2025
CVE-2025-64204: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Oct 29, 2025
CVE-2025-64202: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Oct 29, 2025
CVE-2025-64201: Cross-Site Request Forgery (CSRF)4.3 MediumN/A0%Oct 29, 2025
CVE-2025-64200: Improper Neutralization of Input During Web Page Generation5.9 MediumN/A0%Oct 29, 2025
CVE-2025-64199: Missing Authorization5.3 MediumN/A0%Oct 29, 2025
CVE-2025-64197: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Oct 29, 2025
CVE-2025-64195: Improper Control of Filename for Include/Require Statement in PHP Program7.5 HighN/A0%Oct 29, 2025
CVE-2025-64194: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Oct 29, 2025
CVE-2025-60075: Cross-Site Request Forgery (CSRF)7.1 HighN/A0%Oct 29, 2025
CVE-2025-58939: Cross-Site Request Forgery (CSRF)4.3 MediumN/A0%Oct 29, 2025
CVE-2025-58711: Missing Authorization5.3 MediumN/A0%Oct 29, 2025
CVE-2025-12058: Deserialization of Untrusted DataN/A5.9 Medium0%Oct 29, 2025
CVE-2025-64289: Improper Neutralization of Input During Web Page Generation5.9 MediumN/A0%Oct 29, 2025
83401-83425 of 715156
‹›