The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2025-10781: Improper Neutralization of Special Elements used in an SQL Command7.3 High5.5 Medium0%Sep 22, 2025
CVE-2025-10780: Improper Neutralization of Special Elements used in an SQL Command6.3 Medium2.1 Low0%Sep 22, 2025
CVE-2025-10779: Stack-based Buffer Overflow8.8 High7.4 High1%Sep 22, 2025
CVE-2025-10778: Concurrent Execution using Shared Resource with Improper Synchronization3.1 Low2.3 Low0%Sep 22, 2025
CVE-2025-10777: Improper Limitation of a Pathname to a Restricted Directory6.3 Medium2.1 Low0%Sep 22, 2025
CVE-2025-10776: Cleartext Transmission of Sensitive Information3.7 Low2.9 Low0%Sep 22, 2025
CVE-2025-10775: Improper Neutralization of Special Elements used in an OS Command4.7 Medium2.0 Low20%Sep 22, 2025
CVE-2025-10774: Improper Neutralization of Special Elements used in an OS Command4.7 Medium2.0 Low4%Sep 22, 2025
CVE-2025-10773: Stack-based Buffer Overflow8.8 High7.4 High4%Sep 22, 2025
CVE-2025-10772: Missing Authentication for Critical Function6.3 Medium5.3 Medium0%Sep 22, 2025
CVE-2025-10771: Deserialization of Untrusted Data6.3 Medium2.1 Low1%Sep 21, 2025
CVE-2025-10770: Deserialization of Untrusted Data6.3 Medium2.1 Low0%Sep 21, 2025
CVE-2025-10767: Improper Neutralization of Special Elements used in an OS Command4.5 Medium1.1 Low1%Sep 21, 2025
CVE-2025-53692: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Sep 21, 2025
CVE-2025-10769: Deserialization of Untrusted Data6.3 Medium2.1 Low1%Sep 21, 2025
CVE-2025-10768: Deserialization of Untrusted Data6.3 Medium2.1 Low0%Sep 21, 2025
CVE-2025-6544: Deserialization of Untrusted Data9.8 CriticalN/A1%Sep 21, 2025
CVE-2025-10766: Improper Limitation of a Pathname to a Restricted Directory4.3 Medium2.1 Low1%Sep 21, 2025
CVE-2025-10765: Server-Side Request Forgery (SSRF)4.7 Medium2.0 Low0%Sep 21, 2025
CVE-2025-10764: Server-Side Request Forgery (SSRF)6.3 Medium2.1 Low0%Sep 21, 2025
CVE-2025-10763: Unrestricted Upload of File with Dangerous Type6.3 Medium2.1 Low0%Sep 21, 2025
CVE-2025-10762: Improper Neutralization of Special Elements used in an SQL Command6.3 Medium2.1 Low0%Sep 21, 2025
CVE-2025-10761: Improper Restriction of Excessive Authentication Attempts3.7 Low2.9 Low0%Sep 21, 2025
CVE-2025-10760: Server-Side Request Forgery (SSRF)6.3 Medium2.1 Low0%Sep 21, 2025
CVE-2025-10759: Authorization Bypass Through User-Controlled Key5.3 Medium5.5 Medium0%Sep 21, 2025
86126-86150 of 559420