24 matches found
CVE-2025-63243
A reflected cross-site scripting XSS vulnerability exists in the password change functionality of Pixeon WebLaudos 25.1 01. The slesSenha parameter to the loginAlterarSenha.asp file. An attacker can craft a malicious URL that, when visited by a victim, causes arbitrary JavaScript code to be...
EUVD-2025-198158
A reflected cross-site scripting XSS vulnerability exists in the password change functionality of Pixeon WebLaudos 25.1 01. The slesSenha parameter to the loginAlterarSenha.asp file. An attacker can craft a malicious URL that, when visited by a victim, causes arbitrary JavaScript code to be...
CVE-2025-63243
A reflected cross-site scripting XSS vulnerability exists in the password change functionality of Pixeon WebLaudos 25.1 01. The slesSenha parameter to the loginAlterarSenha.asp file. An attacker can craft a malicious URL that, when visited by a victim, causes arbitrary JavaScript code to be...
PT-2025-47458
A reflected cross-site scripting XSS vulnerability exists in the password change functionality of Pixeon WebLaudos 25.1 01. The sle sSenha parameter to the loginAlterarSenha.asp file. An attacker can craft a malicious URL that, when visited by a victim, causes arbitrary JavaScript code to be...
CVE-2025-63243
A reflected cross-site scripting XSS vulnerability exists in the password change functionality of Pixeon WebLaudos 25.1 01. The slesSenha parameter to the loginAlterarSenha.asp file. An attacker can craft a malicious URL that, when visited by a victim, causes arbitrary JavaScript code to be...
CVE-2025-63243
A reflected cross-site scripting XSS vulnerability exists in the password change functionality of Pixeon WebLaudos 25.1 01. The slesSenha parameter to the loginAlterarSenha.asp file. An attacker can craft a malicious URL that, when visited by a victim, causes arbitrary JavaScript code to be...
Pixeon WebLaudos 安全漏洞
Pixeon WebLaudos is an application from Pixeon that allows access to inspection reports issued by the system. A security vulnerability exists in Pixeon WebLaudos version 25.1 that originates from reflective cross-site scripting in the slesSenha parameter of the loginAlterarSenha.asp file, which...
CVE-2025-63243
Pixeon WebLaudos 25.1 (01) is affected by a reflected XSS in the sle_sSenha parameter of loginAlterarSenha.asp. An attacker can craft a malicious URL that triggers arbitrary JavaScript in the victim’s browser within the application’s context, potentially enabling session cookie theft, data disclo...
EUVD-2025-16684
Malicious code in bioql PyPI...
CVE-2025-27956
Directory Traversal vulnerability in WebLaudos 24.2 04 allows a remote attacker to obtain sensitive information via the id parameter...
CVE-2025-27956
Directory Traversal vulnerability in WebLaudos 24.2 04 allows a remote attacker to obtain sensitive information via the id parameter...
CVE-2025-27956
Directory Traversal vulnerability in WebLaudos 24.2 04 allows a remote attacker to obtain sensitive information via the id parameter...
CVE-2025-27956
CVE-2025-27956 is a directory traversal vulnerability in WebLaudos 24.2 (04) that could allow a remote attacker to obtain sensitive information via the id parameter. The CVSSv3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) yields a base score of 7.5 (HIGH). Affected product: WebLaudos 24.2 (04)....
CVE-2025-27956
Directory Traversal vulnerability in WebLaudos 24.2 04 allows a remote attacker to obtain sensitive information via the id parameter...
CVE-2025-27956
Directory Traversal vulnerability in WebLaudos 24.2 04 allows a remote attacker to obtain sensitive information via the id parameter...
PT-2025-23550 · Weblaudos · Weblaudos
Name of the Vulnerable Software and Affected Versions: WebLaudos version 24.2 04 Description: A Directory Traversal issue allows a remote attacker to obtain sensitive information via the id parameter. This enables the attacker to access confidential data. Recommendations: For WebLaudos version 24...
Pixeon WebLaudos 路径遍历漏洞
Pixeon WebLaudos is an application from Pixeon that allows access to inspection reports issued by the system. A security vulnerability exists in Pixeon WebLaudos version 24.2 04 that stems from an issue with the id parameter and could lead to access to sensitive information...
CVE-2024-48312
WebLaudos v20.8 118 was discovered to contain a cross-site scripting XSS vulnerability via the login page...
CVE-2024-48312
WebLaudos v20.8 118 was discovered to contain a cross-site scripting XSS vulnerability via the login page...
CVE-2024-48312
WebLaudos v20.8 118 was discovered to contain a cross-site scripting XSS vulnerability via the login page...