Metasploit | Penetration Testing Software, Pen Testing Security

Knowledge is power, especially when it’s shared. A collaboration between the open source community and Rapid7, Metasploit helps security teams do more than just verify vulnerabilities, manage security assessments, and improve security awareness; it empowers and arms defenders to always stay one step (or two) ahead of the game.

Title	Date	Author
Land #20811, adds module for Prison Management System 1.0 RCE (CVE-2024-48594) Add Prison Management System 1.0 auth RCE (CVE-2024-48594)	Jan 08, 2026	msutovsky-r7
Land #20700, adds module for Taiga.io RCE (CVE-2025-62368) Adds exploit module for authenticated deserialization vulnerability in Taiga.io (CVE-2025-62368)	Jan 07, 2026	msutovsky-r7

Title

Date

Author

Land #20811, adds module for Prison Management System 1.0 RCE (CVE-2024-48594) Add Prison Management System 1.0 auth RCE (CVE-2024-48594)

Jan 08, 2026

msutovsky-r7

Land #20700, adds module for Taiga.io RCE (CVE-2025-62368) Adds exploit module for authenticated deserialization vulnerability in Taiga.io (CVE-2025-62368)

Jan 07, 2026

msutovsky-r7

Latest Pull Requests

Name	Labels	Author
Poolparty injection Stubs	rn-no-release-notes	dledda-r7
Fixes typo in generating X64 PE file	bug	msutovsky-r7
Added React2Shell exploit for RSC Next.js applications.		oxagast
CVE 2025-14847		JohannesLks
Add MongoDB memory disclosure module (CVE-2025-14847)		xaitax
Fix broken links in CONTRIBUTING.md code-free contributions section	docs , rn-documentation	DataExplorerX

Name

Labels

Author

Poolparty injection Stubs

rn-no-release-notes

dledda-r7

Fixes typo in generating X64 PE file

bug

msutovsky-r7

Added React2Shell exploit for RSC Next.js applications.

oxagast

CVE 2025-14847

JohannesLks

Add MongoDB memory disclosure module (CVE-2025-14847)

xaitax

Fix broken links in CONTRIBUTING.md code-free contributions section

docs , rn-documentation

DataExplorerX

Create a Pull Request

Recent Blog Posts

Mon Jan 05 2026

Metasploit 2025 Annual Wrap-Up

Hard to believe it's that time again, and that Metasploit Framework will see the dawn of another Annual Wrap-Up (and a New Year). All of the metrics and modules you see here would in large part not be possible without the ded...

Fri Dec 19 2025

Metasploit Wrap-Up 12/19/2025

React2Shell Payload ImprovementsLast week Metasploit released an exploit for the React2Shell vulnerability, and this week we have made a couple of improvements to the payloads that it uses. The first improvement affects all M...

Fri Dec 12 2025

Metasploit Wrap-Up 12/12/2025

React2shell ModuleAs you may have heard, on December 3, 2025, the React team announced a critical Remote Code Execution (RCE) vulnerability in servers using the React Server Components (RSC) Flight protocol. The vulnerability...

View More Metasploit Blog Posts