Weekly Metasploit Update: Modules for SMB-to-Meterpreter, Peyara Remote Mouse RCE exploit, and more

Rapid7 published multiple posts including weekly Metasploit updates that add new modules and payloads: an SMB-to-Meterpreter session upgrade via PsExec, an unauthenticated RCE exploit for Peyara Remote Mouse 1.0.1, and a linux/loongarch64 exec payload. A separate Metasploit update adds scanners and exploits including an Audiobookshelf unauthenticated API authentication bypass (CVE-2025-25205), a LiteLLM proxy pre-auth SQL injection scanner, Next.js middleware authorization bypass detection, and a Dalfox deserialization RCE module. Rapid7 also discussed operational and policy topics: formalized