CVE-2025-27956

WebLaudos version 24.2 (04) is affected by a Directory Traversal vulnerability (CWE-22) triggered via the id parameter. A remote attacker can exploit this flaw to obtain sensitive information and access confidential data from the application. While no official patch has been released as of the la...

CVE-2025-63243

Pixeon WebLaudos 25.1 (01) is affected by a reflected XSS in the sle_sSenha parameter of loginAlterarSenha.asp. An attacker can craft a malicious URL that triggers arbitrary JavaScript in the victim’s browser within the application’s context, potentially enabling session cookie theft, data disclo...