Lucene search
+L

50 matches found

Exploit DB
Exploit DB
added 2026/07/07 12:0 a.m.70 views

ProtonVPN v4.4.1 - Unquoted Service Path

Exploit Title: ProtonVPN v4.4.1 - Unquoted Service Path Date: 2026-06-22 Exploit Author: Milad Karimi Contact: [email protected] Zone-H: www.zone-h.org/archive/notifier=Ex3ptionaL Vendor Homepage: https://protonvpn.com/ Software Link: https://protonvpn.com/ Version: 4.4.1 Tested on: Windo...

5.3AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2026/01/14 11:18 p.m.8 views

CVE-2022-50917

ProtonVPN 1.26.0 contains an unquoted service path vulnerability in its WireGuard service configuration that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path by placing malicious executables in specific file system locations to gain elevated...

8.5CVSS7.3AI score0.00193EPSS
SaveExploits1References1
NVD
NVD
added 2026/01/13 11:15 p.m.5 views

CVE-2022-50917

ProtonVPN 1.26.0 contains an unquoted service path vulnerability in its WireGuard service configuration that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path by placing malicious executables in specific file system locations to gain elevated...

8.5CVSS0.00193EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2026/01/13 10:51 p.m.5 views

CVE-2022-50917 ProtonVPN 1.26.0 - Unquoted Service Path

ProtonVPN 1.26.0 contains an unquoted service path vulnerability in its WireGuard service configuration that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path by placing malicious executables in specific file system locations to gain elevated...

8.5CVSS7AI score0.00193EPSS
SaveExploits1References3
OSV
OSV
added 2026/01/13 10:51 p.m.8 views

CVE-2022-50917 ProtonVPN 1.26.0 - Unquoted Service Path

ProtonVPN 1.26.0 contains an unquoted service path vulnerability in its WireGuard service configuration that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path by placing malicious executables in specific file system locations to gain elevated...

8.5CVSS6.1AI score
SaveExploits0References5
Cvelist
Cvelist
added 2026/01/13 10:51 p.m.34 views

CVE-2022-50917 ProtonVPN 1.26.0 - Unquoted Service Path

ProtonVPN 1.26.0 contains an unquoted service path vulnerability in its WireGuard service configuration that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path by placing malicious executables in specific file system locations to gain elevated...

8.5CVSS0.00193EPSS
SaveExploits1References3
CVE
CVE
added 2026/01/13 10:51 p.m.19 views

CVE-2022-50917

ProtonVPN 1.26.0 is affected by an unquoted service path issue in the WireGuard service configuration. The root cause is an unquoted executable path, allowing a local attacker to potentially gain elevated privileges during service startup and execute arbitrary code. This vulnerability is rated hi...

8.5CVSS7AI score0.00193EPSS
SaveExploits1References3Affected Software1
Positive Technologies
Positive Technologies
added 2026/01/13 12:0 a.m.8 views

PT-2026-2393

Name of the Vulnerable Software and Affected Versions ProtonVPN version 1.26.0 Description ProtonVPN version 1.26.0 has an issue with an unquoted service path in its WireGuard service configuration. This could allow local attackers to potentially run arbitrary code. The issue arises because of th...

8.5CVSS6.7AI score0.00193EPSS
SaveExploits1References8
CNNVD
CNNVD
added 2026/01/13 12:0 a.m.5 views

ProtonVPN 代码问题漏洞

ProtonVPN is a VPN application from ProtonVPN Open Source. A code issue vulnerability exists in ProtonVPN version 1.26.0, which stems from an unquoted WireGuard service configuration path that could allow a local attacker to execute arbitrary code...

8.5CVSS6.1AI score0.00193EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
added 2026/01/09 12:17 p.m.10 views

CVE-2018-10169

ProtonVPN 1.3.3 for Windows suffers from a SYSTEM privilege escalation vulnerability through the "ProtonVPN Service" service. This service establishes an NetNamedPipe endpoint that allows arbitrary installed applications to connect and call publicly exposed methods. The "Connect" method accepts a...

10CVSS7.7AI score0.02538EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2018-15796

Malware in sbrugna...

9.3CVSS8.2AI score0.04651EPSS
SaveExploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2018-2247

Malware in sbrugna...

10CVSS9.3AI score0.02538EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.11 views

EUVD-2024-36630

Malicious code in bioql PyPI...

7.8CVSS6.6AI score0.00313EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/05/23 6:34 a.m.11 views

CVE-2024-37391

ProtonVPN before 3.2.10 on Windows mishandles the drive installer path, which should use this: '"' + ExpandConstant'autopf\Proton\Drive' + '"' in Setup/setup.iss...

7.8CVSS7.6AI score0.00313EPSS
SaveExploits0
NVD
NVD
added 2024/07/22 7:15 a.m.18 views

CVE-2024-37391

ProtonVPN before 3.2.10 on Windows mishandles the drive installer path, which should use this: '"' + ExpandConstant'autopf\Proton\Drive' + '"' in Setup/setup.iss...

7.8CVSS0.00313EPSS
SaveExploits0References2
OSV
OSV
added 2024/07/22 12:0 a.m.34 views

CVE-2024-37391

ProtonVPN before 3.2.10 on Windows mishandles the drive installer path, which should use this: '"' + ExpandConstant'autopf\Proton\Drive' + '"' in Setup/setup.iss...

7.8CVSS6.9AI score
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2024/07/22 12:0 a.m.92 views

CVE-2024-37391

ProtonVPN before 3.2.10 on Windows mishandles the drive installer path, which should use this: '"' + ExpandConstant'autopf\Proton\Drive' + '"' in Setup/setup.iss...

6.9AI score0.00313EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/07/22 12:0 a.m.27 views

CVE-2024-37391

ProtonVPN before 3.2.10 on Windows mishandles the drive installer path, which should use this: '"' + ExpandConstant'autopf\Proton\Drive' + '"' in Setup/setup.iss...

0.00313EPSS
SaveExploits0References2
CVE
CVE
added 2024/07/22 12:0 a.m.80 views

CVE-2024-37391

CVE-2024-37391 concerns ProtonVPN on Windows prior to version 3.2.10. The vulnerability stems from mishandling the drive installer path in Setup/setup.iss; the path should be created as the quoted ExpandConstant('{autopf}\Proton\Drive') to correctly locate the drive component. Affected software: ...

7.8CVSS7AI score0.00313EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2024/07/22 12:0 a.m.17 views

PT-2024-27517 · Proton · Protonvpn

Name of the Vulnerable Software and Affected Versions: ProtonVPN versions prior to 3.2.10 Description: The issue is related to the mishandling of the drive installer path in the Setup/setup.iss file. Specifically, it should use the path constructed by ' + ExpandConstant'autopfProtonDrive' + ' to...

7.8CVSS6.8AI score0.00313EPSS
SaveExploits0References8
Rows per page
Query Builder