27 matches found
CVE-2025-63243
A reflected cross-site scripting XSS vulnerability exists in the password change functionality of Pixeon WebLaudos 25.1 01. The slesSenha parameter to the loginAlterarSenha.asp file. An attacker can craft a malicious URL that, when visited by a victim, causes arbitrary JavaScript code to be...
EUVD-2025-198158
A reflected cross-site scripting XSS vulnerability exists in the password change functionality of Pixeon WebLaudos 25.1 01. The slesSenha parameter to the loginAlterarSenha.asp file. An attacker can craft a malicious URL that, when visited by a victim, causes arbitrary JavaScript code to be...
CVE-2025-63243
A reflected cross-site scripting XSS vulnerability exists in the password change functionality of Pixeon WebLaudos 25.1 01. The slesSenha parameter to the loginAlterarSenha.asp file. An attacker can craft a malicious URL that, when visited by a victim, causes arbitrary JavaScript code to be...
CVE-2025-63243
A reflected cross-site scripting XSS vulnerability exists in the password change functionality of Pixeon WebLaudos 25.1 01. The slesSenha parameter to the loginAlterarSenha.asp file. An attacker can craft a malicious URL that, when visited by a victim, causes arbitrary JavaScript code to be...
CVE-2025-63243
A reflected cross-site scripting XSS vulnerability exists in the password change functionality of Pixeon WebLaudos 25.1 01. The slesSenha parameter to the loginAlterarSenha.asp file. An attacker can craft a malicious URL that, when visited by a victim, causes arbitrary JavaScript code to be...
PT-2025-47458
A reflected cross-site scripting XSS vulnerability exists in the password change functionality of Pixeon WebLaudos 25.1 01. The sle sSenha parameter to the loginAlterarSenha.asp file. An attacker can craft a malicious URL that, when visited by a victim, causes arbitrary JavaScript code to be...
Pixeon WebLaudos 安全漏洞
Pixeon WebLaudos is an application from Pixeon that allows access to inspection reports issued by the system. A security vulnerability exists in Pixeon WebLaudos version 25.1 that originates from reflective cross-site scripting in the slesSenha parameter of the loginAlterarSenha.asp file, which...
CVE-2025-63243
Pixeon WebLaudos 25.1 (01) is affected by a reflected XSS in the sle_sSenha parameter of loginAlterarSenha.asp. An attacker can craft a malicious URL that triggers arbitrary JavaScript in the victim’s browser within the application’s context, potentially enabling session cookie theft, data disclo...
CVE-2025-63243: Improper Neutralization of Input During Web Page Generation
A reflected cross-site scripting XSS vulnerability exists in the password change functionality of Pixeon WebLaudos 25.1 01. The slesSenha parameter to the loginAlterarSenha.asp file. An attacker can craft a malicious URL that, when visited by a victim, causes arbitrary JavaScript code to be...
EUVD-2025-16684
Malicious code in bioql PyPI...
CVE-2025-27956
Directory Traversal vulnerability in WebLaudos 24.2 04 allows a remote attacker to obtain sensitive information via the id parameter...
CVE-2025-27956
Directory Traversal vulnerability in WebLaudos 24.2 04 allows a remote attacker to obtain sensitive information via the id parameter...
CVE-2025-27956
Directory Traversal vulnerability in WebLaudos 24.2 04 allows a remote attacker to obtain sensitive information via the id parameter...
PT-2025-23550 · Weblaudos · Weblaudos
Name of the Vulnerable Software and Affected Versions: WebLaudos version 24.2 04 Description: A Directory Traversal issue allows a remote attacker to obtain sensitive information via the id parameter. This enables the attacker to access confidential data. Recommendations: For WebLaudos version 24...
Pixeon WebLaudos 路径遍历漏洞
Pixeon WebLaudos is an application from Pixeon that allows access to inspection reports issued by the system. A security vulnerability exists in Pixeon WebLaudos version 24.2 04 that stems from an issue with the id parameter and could lead to access to sensitive information...
CVE-2025-27956
WebLaudos version 24.2 (04) is affected by a Directory Traversal vulnerability (CWE-22) triggered via the id parameter. A remote attacker can exploit this flaw to obtain sensitive information and access confidential data from the application. While no official patch has been released as of the la...
CVE-2025-27956
Directory Traversal vulnerability in WebLaudos 24.2 04 allows a remote attacker to obtain sensitive information via the id parameter...
CVE-2025-27956
Directory Traversal vulnerability in WebLaudos 24.2 04 allows a remote attacker to obtain sensitive information via the id parameter...
CVE-2025-27956: Improper Limitation of a Pathname to a Restricted Directory
Directory Traversal vulnerability in WebLaudos 24.2 04 allows a remote attacker to obtain sensitive information via the id parameter...