CVE-2025-63243

A reflected cross-site scripting XSS vulnerability exists in the password change functionality of Pixeon WebLaudos 25.1 01. The slesSenha parameter to the loginAlterarSenha.asp file. An attacker can craft a malicious URL that, when visited by a victim, causes arbitrary JavaScript code to be...

EUVD-2025-198158

A reflected cross-site scripting XSS vulnerability exists in the password change functionality of Pixeon WebLaudos 25.1 01. The slesSenha parameter to the loginAlterarSenha.asp file. An attacker can craft a malicious URL that, when visited by a victim, causes arbitrary JavaScript code to be...

CVE-2025-63243

A reflected cross-site scripting XSS vulnerability exists in the password change functionality of Pixeon WebLaudos 25.1 01. The slesSenha parameter to the loginAlterarSenha.asp file. An attacker can craft a malicious URL that, when visited by a victim, causes arbitrary JavaScript code to be...

Pixeon WebLaudos 安全漏洞

Pixeon WebLaudos is an application from Pixeon that allows access to inspection reports issued by the system. A security vulnerability exists in Pixeon WebLaudos version 25.1 that originates from reflective cross-site scripting in the slesSenha parameter of the loginAlterarSenha.asp file, which...

CVE-2025-63243

A reflected cross-site scripting XSS vulnerability exists in the password change functionality of Pixeon WebLaudos 25.1 01. The slesSenha parameter to the loginAlterarSenha.asp file. An attacker can craft a malicious URL that, when visited by a victim, causes arbitrary JavaScript code to be...

PT-2025-47458

A reflected cross-site scripting XSS vulnerability exists in the password change functionality of Pixeon WebLaudos 25.1 01. The sle sSenha parameter to the loginAlterarSenha.asp file. An attacker can craft a malicious URL that, when visited by a victim, causes arbitrary JavaScript code to be...

CVE-2025-63243

Pixeon WebLaudos 25.1 (01) is affected by a reflected XSS in the sle_sSenha parameter of loginAlterarSenha.asp. An attacker can craft a malicious URL that triggers arbitrary JavaScript in the victim’s browser within the application’s context, potentially enabling session cookie theft, data disclo...

CVE-2025-63243

A reflected cross-site scripting XSS vulnerability exists in the password change functionality of Pixeon WebLaudos 25.1 01. The slesSenha parameter to the loginAlterarSenha.asp file. An attacker can craft a malicious URL that, when visited by a victim, causes arbitrary JavaScript code to be...

EUVD-2025-16684

Malicious code in bioql PyPI...

CVE-2025-27956

Directory Traversal vulnerability in WebLaudos 24.2 04 allows a remote attacker to obtain sensitive information via the id parameter...

CVE-2025-27956

Directory Traversal vulnerability in WebLaudos 24.2 04 allows a remote attacker to obtain sensitive information via the id parameter...

CVE-2025-27956

Directory Traversal vulnerability in WebLaudos 24.2 04 allows a remote attacker to obtain sensitive information via the id parameter...

Pixeon WebLaudos 路径遍历漏洞

Pixeon WebLaudos is an application from Pixeon that allows access to inspection reports issued by the system. A security vulnerability exists in Pixeon WebLaudos version 24.2 04 that stems from an issue with the id parameter and could lead to access to sensitive information...

CVE-2025-27956

The WebLaudos application, specifically version 24.2 (04) , is susceptible to a Directory Traversal vulnerability. A remote attacker can exploit an issue involving the id parameter to access and obtain sensitive information or confidential data from the system. As a temporary workaround, it is re...

CVE-2025-27956

Directory Traversal vulnerability in WebLaudos 24.2 04 allows a remote attacker to obtain sensitive information via the id parameter...

PT-2025-23550 · Weblaudos · Weblaudos

Name of the Vulnerable Software and Affected Versions: WebLaudos version 24.2 04 Description: A Directory Traversal issue allows a remote attacker to obtain sensitive information via the id parameter. This enables the attacker to access confidential data. Recommendations: For WebLaudos version 24...

CVE-2025-27956

Directory Traversal vulnerability in WebLaudos 24.2 04 allows a remote attacker to obtain sensitive information via the id parameter...

CVE-2024-48312

WebLaudos v20.8 118 was discovered to contain a cross-site scripting XSS vulnerability via the login page...

CVE-2024-48312

WebLaudos v20.8 118 was discovered to contain a cross-site scripting XSS vulnerability via the login page...

PT-2024-33079 · Weblaudos · Weblaudos

Name of the Vulnerable Software and Affected Versions: WebLaudos version 20.8 118 Description: A cross-site scripting XSS issue was found in the login page, allowing potential attackers to inject malicious scripts. Recommendations: For version 20.8 118, update to a newer version that addresses th...