ProtonVPN 1.26.0 contains an unquoted service path vulnerability in its WireGuard service configuration that allows local attacker

ProtonVPN before 3.2.10 on Windows mishandles the drive installer path, which should use this: '"' + ExpandConstant('{autopf}\Prot

Proton v0.2.0 allows an attacker to create a malicious link inside a markdown file. When the victim clicks the link, the applicati

Optergy Proton/Enterprise devices allow Authenticated File Upload with Code Execution as root.

Optergy Proton/Enterprise devices allow Cross-Site Request Forgery (CSRF).

Optergy Proton/Enterprise devices allow Username Disclosure.

Optergy Proton/Enterprise devices have an Unauthenticated SMS Sending Service.

Optergy Proton/Enterprise devices allow Unauthenticated Internal Network Information Disclosure.

Optergy Proton/Enterprise devices allow Remote Root Code Execution via a Backdoor Console.

Optergy Proton/Enterprise devices allow Open Redirect.

Optergy Proton/Enterprise devices have Hard-coded Credentials.

parse_notice (TiCPU) in EnergyMech (emech) before 3.0.2 allows remote attackers to cause a denial of service (crash) via empty IRC