The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2025-60219: Unrestricted Upload of File with Dangerous Type10.0 CriticalN/A0%Sep 26, 2025
CVE-2025-60186: Improper Neutralization of Input During Web Page Generation5.9 MediumN/A0%Sep 26, 2025
CVE-2025-60185: Improper Neutralization of Input During Web Page Generation5.9 MediumN/A0%Sep 26, 2025
CVE-2025-60184: Improper Neutralization of Input During Web Page Generation5.9 MediumN/A0%Sep 26, 2025
CVE-2025-60181: Server-Side Request Forgery (SSRF)5.4 MediumN/A0%Sep 26, 2025
CVE-2025-60179: Improper Neutralization of Input During Web Page Generation5.9 MediumN/A0%Sep 26, 2025
CVE-2025-60177: Improper Neutralization of Input During Web Page Generation5.9 MediumN/A0%Sep 26, 2025
CVE-2025-60173: Cross-Site Request Forgery (CSRF)7.1 HighN/A0%Sep 26, 2025
CVE-2025-60172: Cross-Site Request Forgery (CSRF)7.1 HighN/A0%Sep 26, 2025
CVE-2025-60171: Cross-Site Request Forgery (CSRF)7.1 HighN/A0%Sep 26, 2025
CVE-2025-60170: Cross-Site Request Forgery (CSRF)7.1 HighN/A0%Sep 26, 2025
CVE-2025-60169: Cross-Site Request Forgery (CSRF)7.1 HighN/A0%Sep 26, 2025
CVE-2025-60167: Exposure of Sensitive System Information to an Unauthorized Control Sphere4.3 MediumN/A0%Sep 26, 2025
CVE-2025-60166: Missing Authorization4.3 MediumN/A0%Sep 26, 2025
CVE-2025-60165: Missing Authorization4.3 MediumN/A0%Sep 26, 2025
CVE-2025-60164: Cross-Site Request Forgery (CSRF)7.1 HighN/A0%Sep 26, 2025
CVE-2025-60163: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Sep 26, 2025
CVE-2025-60162: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Sep 26, 2025
CVE-2025-60161: Server-Side Request Forgery (SSRF)5.4 MediumN/A0%Sep 26, 2025
CVE-2025-60160: Improper Neutralization of Input During Web Page Generation5.9 MediumN/A0%Sep 26, 2025
CVE-2025-60159: Missing Authorization4.3 MediumN/A0%Sep 26, 2025
CVE-2025-60158: Improper Neutralization of Input During Web Page Generation5.9 MediumN/A0%Sep 26, 2025
CVE-2025-60157: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Sep 26, 2025
CVE-2025-60156: Cross-Site Request Forgery (CSRF)9.6 CriticalN/A0%Sep 26, 2025
CVE-2025-60155: Missing Authorization5.3 MediumN/A0%Sep 26, 2025
85651-85675 of 544242