CVEs: Metasploit module, page 4
373 CVEs with a public Metasploit Framework module, sorted by threat level then EPSS. Showing 361-373. Use search to combine filters.
MEDIUM 6.9
Metasploit moduleATT&CK inferred
CVE-2025-34441CVE-2025-34441: AVideo versions prior to 20.1 expose sensitive user information through an unauthenticated…
wwbn · avideo · EPSS 0.85% · Threat 45MEDIUM 6.9
Metasploit moduleATT&CK inferred
CVE-2025-34442CVE-2025-34442: AVideo versions prior to 20.1 disclose absolute filesystem paths via multiple public API e…
wwbn · avideo · EPSS 0.85% · Threat 45MEDIUM 6.5
Metasploit moduleATT&CK inferred
CVE-2024-57487CVE-2024-57487: In Code-Projects Online Car Rental System 1.0, the file upload feature does not validate f…
code-projects · online car rental system · EPSS 2.46% · Threat 43MEDIUM 6.5
Metasploit moduleATT&CK inferred
CVE-2025-2292CVE-2025-2292: Xorcom CompletePBX is vulnerable to an authenticated path traversal, allowing for arbitrar…
xorcom · completepbx · EPSS 1.79% · Threat 43MEDIUM 6.5
Metasploit moduleATT&CK inferred
CVE-2025-49136CVE-2025-49136: listmonk is a standalone, self-hosted, newsletter and mailing list manager. Starting in ve…
nadh · listmonk · EPSS 1.58% · Threat 43MEDIUM 6.5
Metasploit moduleATT&CK inferred
CVE-2026-53959CVE-2026-53959: 4gaBoards is a boards system for realtime project management. Prior to 3.3.9, 4gaBoards al…
Unknown · · EPSS 1.03% · Threat 43MEDIUM 5.3
Metasploit moduleExploit-DBPublic PoCATT&CK inferred
CVE-2024-28397CVE-2024-28397: An issue in the component js2py.disable_pyimport() of js2py up to v0.74 allows attackers t…
Unknown · · EPSS 4.55% · Threat 38MEDIUM 5.4
Metasploit moduleExploit-DBATT&CK inferred
CVE-2025-52367CVE-2025-52367: Cross Site Scripting vulnerability in PivotX CMS v.3.0.0 RC 3 allows a remote attacker to …
pivotx · pivotx · EPSS 4.20% · Threat 38UNKNOWN
Metasploit moduleATT&CK inferred
CVE-2025-0655CVE-2025-0655: Rejected reason: ** REJECT ** DO NOT USE THIS CVE ID NUMBER. The Rejected CVE Record is a …
Unknown · · EPSS n/a · Threat 35UNKNOWN
Metasploit modulePublic PoCATT&CK inferred
CVE-2025-2825CVE-2025-2825: Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2025-31161. Reason: This Reco…
Unknown · · EPSS n/a · Threat 35UNKNOWN
Metasploit modulePublic PoCATT&CK inferred
CVE-2025-66478CVE-2025-66478: Rejected reason: This CVE is a duplicate of CVE-2025-55182.
Unknown · · EPSS n/a · Threat 35LOW 2.7
Metasploit moduleATT&CK inferred
CVE-2024-48455CVE-2024-48455: An issue in Netis Wifi6 Router NX10 2.0.1.3643 and 2.0.1.3582 and Netis Wifi 11AC Router N…
Unknown · · EPSS 6.29% · Threat 25LOW 2
Metasploit moduleATT&CK inferred
CVE-2025-8518