Exploit for CVE-2025-15001

CV...

WordPress FS Registration Password plugin <= 1.0.1 - Unauthenticated Privilege Escalation via Account Takeover vulnerability

Unauthenticated Privilege Escalation via Account Takeover vulnerability discovered by Drew Webber mcdruid in WordPress Plugin FS Registration Password versions = 1.0.1...

CVE-2025-15001

creationtimestamp| type| source ---|---|--- 2026-01-06 05:43:05+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbqan5lmr32v 2026-01-06 06:01:52+00:00| seen| Telegram/CcmqjLA2mNtM5BJazY2xuLNEDduKSSrq7amdf2ocdCDMM4 2026-01-06 07:36:06+00:00| seen|...

CVE-2025-15001 FS Registration Password <= 1.0.1 - Unauthenticated Privilege Escalation via Account Takeover

The FS Registration Password plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.0.1. This is due to the plugin not properly validating a user's identity prior to updating their password. This makes it possible for unauthenticate...

CVE-2016-15001

CVE-2016-15001 is rejected/not used; this candidate entry was withdrawn by its CNA.

CVE-2016-15001

...

CVE-2020-15001

CVE-2020-15001 affects Yubico YubiKey 5 NFC, specifically firmware versions 5.0.0–5.2.6 and 5.3.0–5.3.1. The OTP application allows optional access codes on OTP slots, but the access code is not checked when updating NFC-specific OTP configurations. As a result, an attacker could read configured ...

Atlassian Jira Server and Data Center Template Injection Vulnerability (JRASERVER-69933)

According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is potentially affected by a template injection vulnerability in the Jira Importers Plugin. An unauthenticated, remote attacker can exploit this issue to execute arbitrary commands on the...

CVE-2019-15001

CVE-2019-15001 concerns Atlassian Jira Server/Data Center, specifically the Jira Importers Plugin. The vulnerability is a server-side template injection that can be triggered by a crafted PUT request, allowing remote code execution. The issue requires Administrator permissions to exploit and has ...

Template injection in Jira importers plugin - CVE-2019-15001

h3. Issue Summary There was a server-side template injection vulnerability in Jira Server and Data Center, in the Jira Importers Plugin JIM. An attacker with "JIRA Administrators" access can exploit this issue. Successful exploitation of this issue allows an attacker to remotely execute code on...

CVE-2018-15001

The CVE-2018-15001 entry concerns the Vivo V7 Android device (build vivo/1718/1718:7.1.2/N2G47H/...) where a platform app with package com.vivo.bsptest (BSPTestActivity, versionCode 1, versionName 1.0) exposes an exported activity that lets any co-located app initiate writing of logcat, Bluetooth...

Fedora Update for rolekit FEDORA-2015-15001

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...