CVE-2025-1810

CVE-2025-1810 affects Pixsoft Vivaz 6.0.11. The vulnerability arises from an XSS in the Login Endpoint, via manipulation of the argument sistema in the file path /servlet?act=login&submit=1&evento=0&pixrnd=... The issue is exploitable remotely and exploitation has been publicly disclosed. Multipl...

CVE-2025-1809

A vulnerability was found in Pixsoft Sol up to 7.6.6c and classified as critical. This issue affects some unknown processing of the file /pixprojetos/servlet?act=login&submit=1&evento=0&pixrnd=0125021816444195731041 of the component Login Endpoint. The manipulation of the argument txtUsuario lead...

CVE-2025-1809 Pixsoft Sol Login Endpoint servlet sql injection

A vulnerability was found in Pixsoft Sol up to 7.6.6c and classified as critical. This issue affects some unknown processing of the file /pixprojetos/servlet?act=login&submit=1&evento=0&pixrnd=0125021816444195731041 of the component Login Endpoint. The manipulation of the argument txtUsuario lead...

CVE-2025-1809 Pixsoft Sol Login Endpoint servlet sql injection

A vulnerability was found in Pixsoft Sol up to 7.6.6c and classified as critical. This issue affects some unknown processing of the file /pixprojetos/servlet?act=login&submit=1&evento=0&pixrnd=0125021816444195731041 of the component Login Endpoint. The manipulation of the argument txtUsuario lead...

CVE-2025-1809

Pixsoft Sol (versions up to 7.6.6c) is affected by a vulnerability in the Login Endpoint. The issue involves manipulation of the txtUsuario parameter in the URL /pix_projetos/servlet?act=login&submit=1&evento=0&pixrnd=… which leads to SQL injection. The vulnerability can be exploited remotely, an...

CVE-2025-1808 Pixsoft E-Saphira Login Endpoint servlet sql injection

A vulnerability has been found in Pixsoft E-Saphira 1.7.24 and classified as critical. This vulnerability affects unknown code of the file /servlet?act=login&tipo=1 of the component Login Endpoint. The manipulation of the argument txtUsuario leads to sql injection. The attack can be initiated...

CVE-2025-1808

CVE-2025-1808 affects Pixsoft E-Saphira 1.7.24. The vulnerability exists in the Login Endpoint, specifically in the file path /servlet?act=login&tipo=1, where manipulating the argument txtUsuario leads to an SQL injection. It is exploitable remotely and exploitation has been disclosed publicly. M...

PT-2025-6107 · Pix · Pix Software Vivaz

Name of the Vulnerable Software and Affected Versions: Pix Software Vivaz version 6.0.10 Description: A critical issue has been found in the code related to the /servlet?act=login file, where manipulation of the usuario argument can lead to SQL injection. This issue can be exploited remotely. The...

PT-2025-6040 · Kelio · Kelio Visio X4 +2

Name of the Vulnerable Software and Affected Versions: Kelio Visio 1 versions 3.2C through 5.1K Kelio Visio X7 versions 3.2C through 5.1K Kelio Visio X4 versions 3.2C through 5.1K Description: The issue is a Reflected Cross-Site Scripting XSS vulnerability that could allow an attacker to execute ...

CVE-2025-0970

A vulnerability was found in Zenvia Movidesk up to 25.01.22. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /Account/Login. The manipulation of the argument ReturnUrl leads to open redirect. The attack can be launched remotely. The...

PT-2025-4116 · Zenvia · Zenvia Movidesk

Name of the Vulnerable Software and Affected Versions: Zenvia Movidesk versions up to 25.01.22 Description: A vulnerability was found in Zenvia Movidesk, affecting an unknown functionality of the file /Account/Login. The manipulation of the ReturnUrl argument leads to open redirect. The attack ca...

PT-2025-3478 · Easyvirt · Easyvirt Dcscope +1

Name of the Vulnerable Software and Affected Versions: EasyVirt DCScope versions 8.6.0 and earlier EasyVirt CO2Scope versions 1.3.0 and earlier Description: The issue allows remote unauthenticated attackers to execute arbitrary SQL commands. This can be achieved via the username or password...

CVE-2024-13198

A vulnerability classified as problematic has been found in langhsu Mblog Blog System 3.5.0. Affected is an unknown function of the file /login. The manipulation leads to observable response discrepancy. It is possible to launch the attack remotely. The complexity of an attack is rather high. The...

Open Redirect

Overview sickchill is an Automatic Video Library Manager for TV Shows Affected versions of this package are vulnerable to Open Redirect due to improper validation of the next parameter in the login endpoint. An attacker can redirect users to arbitrary external URLs by manipulating the input to th...

GHSA-6GF2-FFQ8-GCWW GHSL-2024-288: SickChill open redirect in login

SickChill is an automatic video library manager for TV shows. A user-controlled login endpoint's next parameter takes arbitrary content. Prior to commit c7128a8946c3701df95c285810eb75b2de18bf82, an authenticated attacker may use this to redirect the user to arbitrary destinations, leading to open...

CVE-2024-53995

SickChill is an automatic video library manager for TV shows. A user-controlled login endpoint's next parameter takes arbitrary content. Prior to commit c7128a8946c3701df95c285810eb75b2de18bf82, an authenticated attacker may use this to redirect the user to arbitrary destinations, leading to open...

CVE-2024-53995

SickChill open redirect (CVE-2024-53995): The login endpoint’s next_ parameter allowed an authenticated user to redirect to arbitrary destinations. This concrete issue affects the login flow of SickChill and is mitigated in commit c7128a8946c3701df95c285810eb75b2de18bf82 by redirecting to setting...

CVE-2024-53995 GHSL-2024-288: SickChill open redirect in login

SickChill is an automatic video library manager for TV shows. A user-controlled login endpoint's next parameter takes arbitrary content. Prior to commit c7128a8946c3701df95c285810eb75b2de18bf82, an authenticated attacker may use this to redirect the user to arbitrary destinations, leading to open...

CVE-2024-53995 GHSL-2024-288: SickChill open redirect in login

SickChill is an automatic video library manager for TV shows. A user-controlled login endpoint's next parameter takes arbitrary content. Prior to commit c7128a8946c3701df95c285810eb75b2de18bf82, an authenticated attacker may use this to redirect the user to arbitrary destinations, leading to open...

PT-2025-3012

Name of the Vulnerable Software and Affected Versions SickChill versions prior to commit c7128a8946c3701df95c285810eb75b2de18bf82 Description The issue concerns an open redirect in the login endpoint of SickChill, an automatic video library manager for TV shows. A user-controlled login endpoint's...