CVE-2025-0643

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Narkom Communication and Software Technologies Trade Ltd. Co. Pyxis Signage allows Stored XSS. This issue affects Pyxis Signage: through 31012025...

CVE-2025-0645

CVE-2025-0645 concerns Narkom Pyxis Signage (through version 31012025) with an Unrestricted Upload of File with Dangerous Type vulnerability. The issue allows uploading dangerous files that access functionality not properly constrained by ACLs, effectively enabling access beyond intended permissi...