Metasploit Wrap-Up 12/05/2025

Twonky Auth Bypass, RCEs and RISC-V Reverse Shell Payloads This was another fantastic week in terms of PR contribution to the Metasploit Framework. Rapid7’s very own Ryan Emmons recently disclosed CVE-2025-13315 and CVE-2025-13316 which exist in Twonky Server and allow decrypting admin credential...

CVE-2025-13316

creationtimestamp| type| source ---|---|--- 2025-11-19 19:00:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5ywsf25rx26 2025-11-28 21:02:29+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m6prtasg5n2w...