Approved changes feed: RSS · Atom

cpe:2.3:a:anonproxyserver:anon_proxy_server:0.104:*:*:*:*:*:*:*

part: a version: 0.104 update: *

VendorAnonproxyserver (95646c38-e25f-505f-8519-201ac39e7da1)
ProductAnon Proxy Server (6bb38843-bc2c-5588-89df-bd87e0b7f52b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-41357 vulnerable 2026-06-08 07:25:06.867730 Reflected Cross-Site Scripting on Anon Proxy Server
Reflected Cross-Site Scripting (XSS) vulnerability in Anon Proxy Server v0.104. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending him/her a malicious URL. This vulnerability can be exploited to steal sensitive user data, such as session cookies, or to perform actions on behalf of the user. It affects 'host' parameter in '/diagdns.php' endpoint.
Published: 2026-03-31T08:58:09.091Z
Updated: 2026-03-31T18:04:14.348Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-41356 vulnerable 2026-06-08 07:25:06.867111 Reflected Cross-Site Scripting in Anon Proxy Server
Reflected Cross-Site Scripting (XSS) vulnerability in Anon Proxy Server v0.104. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending him/her a malicious URL. This vulnerability can be exploited to steal sensitive user data, such as session cookies, or to perform actions on behalf of the user. It affects 'host' parameter in '/diagconnect.php' endpoint.
Published: 2026-03-31T08:53:50.172Z
Updated: 2026-03-31T18:04:20.567Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-41355 vulnerable 2026-06-08 07:25:06.866361 Reflected Cross-Site Scripting on Anon Proxy Server
Reflected Cross-Site Scripting (XSS) vulnerability in Anon Proxy Server v0.104. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending him/her a malicious URL. This vulnerability can be exploited to steal sensitive user data, such as session cookies, or to perform actions on behalf of the user. It affects 'port' and 'proxyPort' parameters in '/anon.php' endpoint.
Published: 2026-03-31T08:48:28.950Z
Updated: 2026-03-31T18:04:32.025Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.