CVE-2025-27956

CVE-2025-27956 is a directory traversal vulnerability in WebLaudos 24.2 (04) that could allow a remote attacker to obtain sensitive information via the id parameter. The CVSSv3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) yields a base score of 7.5 (HIGH). Affected product: WebLaudos 24.2 (04)....

CVE-2025-63243

Pixeon WebLaudos 25.1 (01) is affected by a reflected XSS in the sle_sSenha parameter of loginAlterarSenha.asp. An attacker can craft a malicious URL that triggers arbitrary JavaScript in the victim’s browser within the application’s context, potentially enabling session cookie theft, data disclo...