Skip to content
OpenAdvisories

Vendor

Rapid7

135 known vulnerabilities.

Products

Velociraptor 42 Nexpose 17 Insight Agent 12 Metasploit Framework 12 InsightVM 8 Appspider Pro 6 Metasploit Pro 6 Metasploit 4 InsightCloudSec 3 InsightConnect Sed Plugin 3 AppSpider 2 Insight Platform 2 Rapid7 Nexpose 1 Platform 1 InsightAppSec 1 InsightConnect Ping Plugin 1 Vulnerability Management 1 InsightConnect Finger Plugin 1 InsightConnect Markdown Plugin 1 InsightConnect Traceroute Plugin 1 Minerva 1 InsightConnect AWK Plugin 1 Insight Collector 1 Nexpose hardware appliance 1 Nexpose/InsightVM Security Console 1 Nexpose Virtual Appliance 1 InsightVM Virtual Appliance 1 Metasploit (Pro, Express, and Community editions) 1 InsightConnect SQLmap Plugin 1 Komand 1 InsightConnect RPM Plugin 1 InsightConnect Compression Plugin 1 InsightConnect Tcpdump Plugin 1 InsightConnect TR Plugin 1 InsightVM/Nexpose 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 8.8
    CVE-2026-87690 Public exploit

    Metasploit Framework ios_image_gather Path Traversal Leading to Arbitrary File Write and Code Execution

    The Metasploit Framework post module post/apple_ios/gather/ios_image_gather is affected by a relative path traversal vulnerability (CWE-22). The module interpolates file names taken from a Meterpreter directory listing — data fully controlled by a hostile or …

    Rapid7 Metasploit Framework
  • High 7.0
    CVE-2020-7384 Public exploit EPSS 30%

    Client-Side Command Injection in Rapid7 Metasploit

    Rapid7's Metasploit msfvenom framework handles APK files in a way that allows for a malicious user to craft and publish a file that would execute arbitrary commands on a victim's machine.

    Rapid7 Metasploit
  • High 7.5
    CVE-2019-5645 Public exploit EPSS 49%

    Rapid7 Metasploit HTTP Handler Denial of Service

    By sending a specially crafted HTTP GET request to a listening Rapid7 Metasploit HTTP handler, an attacker can register an arbitrary regular expression. When evaluated, this malicious handler can either prevent new HTTP handler sessions from being established…

    Rapid7 Metasploit Framework
  • High 7.4
    CVE-2019-5624 Public exploit

    Rapid7 Metasploit Framework Zip Import Directory Traversal

    Rapid7 Metasploit Framework suffers from an instance of CWE-22, Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in the Zip import function of Metasploit. Exploiting this vulnerability can allow an attacker to execute arbitrary c…

    Rapid7 Metasploit Framework