Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Reflected Cross-Site Scripting (XSS) vulnerability in Anon Proxy Server v0.104. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending him/her a malicious URL. This vulnerability can be exploited to steal sensitive user data, such as session cookies, or to perform actions on behalf of the user. It affects 'host' parameter in '/diagdns.php' endpoint.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
⚠️#INCIBEaviso | Cross-Site Scripting (XSS) reflejado en #Anon Proxy Server #CVE CVE-2025-41355, CVE-2025-41356 y CVE-2025-41357 https://www.incibe.es/incibe-cert/alerta-temprana/avisos/cross-site-scripting-xss-reflejado-en-anon-proxy-server #AvisosDeSeguridad #TI #CNA #0day
Post summary
INCIBE issues an early‑warning alert on reflected XSS vulnerabilities (CVE‑2025‑41355/41356/41357) affecting Anon Proxy Server.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | anonproxyserver | anon_proxy_server | 0.104 | - | - |