Weekly Metasploit Update: Modules for SMB-to-Meterpreter, Peyara Remote Mouse RCE exploit, and more

Rapid7 blog roundup covering Metasploit framework updates and broader security commentary. Metasploit additions include: a SMB-to-Meterpreter session upgrade module using PsExec (windows/manage/smb_to_meterpreter); an exploit module for Peyara Remote Mouse 1.0.1 unauthenticated RCE; a linux/loongarch64 exec payload; and multiple scanners/auxiliary modules (Audiobookshelf unauthenticated API auth bypass detecting CVE-2025-25205, LiteLLM proxy pre-auth SQL injection scanner, Next.js middleware auth bypass scanner, Dalfox deserialization RCE, and other improvements). Separate posts discuss Rapid7