PT-2018-17476

Name of the Vulnerable Software and Affected Versions Panda Global Protection version 17.0.1 Description The issue concerns an unquoted Windows search path vulnerability in the panda url filtering service, which allows local users to gain privileges via a malicious artefact. Recommendations For...

Panda Global Protection <= 17.00.01 DoS Vulnerability

Panda Global Protection through 17.00.01 is vulnerable to multiple vulnerabilities that can cause a system crash. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Panda Global Protection Denial of Service Vulnerability (CNVD-2018-00586)

Panda Global Protection is a suite of antivirus software from the Spanish company Panda Security. The software protects devices from viruses, spyware, hackers and other Internet threats. A denial of service vulnerability exists in Panda Global Protection version 17.0.1. An attacker can exploit th...

CVE-2017-17684

Panda Global Protection 17.0.1 allows a system crash via a 0xb3702c04 \.\PSMEMDriver DeviceIoControl request...

CVE-2017-17683

Panda Global Protection 17.0.1 allows a system crash via a 0xb3702c44 \.\PSMEMDriver DeviceIoControl request...

CVE-2017-17684

Panda Global Protection 17.0.1 allows a system crash via a 0xb3702c04 \.\PSMEMDriver DeviceIoControl request...

Cross site request forgery (csrf)

Panda Global Protection 17.0.1 allows a system crash via a 0xb3702c44 \.\PSMEMDriver DeviceIoControl request...

Cross site request forgery (csrf)

Panda Global Protection 17.0.1 allows a system crash via a 0xb3702c04 \.\PSMEMDriver DeviceIoControl request...

CVE-2017-17683

Panda Global Protection 17.0.1 allows a system crash via a 0xb3702c44 \.\PSMEMDriver DeviceIoControl request...

CVE-2017-17683

CVE-2017-17683 affects Panda Global Protection 17.0.1 and allows a denial-of-service (system crash) via a 0xb3702c44 \.PSMEMDriver DeviceIoControl request. The vulnerability is associated with an affected PSMEMDriver path and can be triggered remotely (network attack vector) with no user interact...

CVE-2017-17684

Panda Global Protection 17.0.1 allows a system crash via a 0xb3702c04 \.\PSMEMDriver DeviceIoControl request...

CVE-2017-17684

Panda Global Protection 17.0.1 is affected by CVE-2017-17684, a denial-of-service due to a crafted 0xb3702c04 \.PSMEMDriver DeviceIoControl request that can crash the system. Public sources consistently describe a DoS impact (system crash) rather than remote code execution. Affected product line ...

CVE-2017-17683: Improper Restriction of Operations within the Bounds of a Memory Buffer

Panda Global Protection 17.0.1 allows a system crash via a 0xb3702c44 \.\PSMEMDriver DeviceIoControl request...

CVE-2017-17684: Improper Restriction of Operations within the Bounds of a Memory Buffer

Panda Global Protection 17.0.1 allows a system crash via a 0xb3702c04 \.\PSMEMDriver DeviceIoControl request...

PT-2017-14950

Name of the Vulnerable Software and Affected Versions Panda Global Protection version 17.0.1 Description The issue allows a system crash via a specific DeviceIoControl request to the .PSMEMDriver. Recommendations For version 17.0.1, at the moment, there is no information about a newer version tha...

PT-2017-14951

Name of the Vulnerable Software and Affected Versions Panda Global Protection version 17.0.1 Description The issue allows a system crash via a specific DeviceIoControl request to the .PSMEMDriver. Recommendations For Panda Global Protection version 17.0.1, at the moment, there is no information...

Panda Global Protection <= 16.1.2 Privilege Escalation Vulnerability

Panda Global Protection is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Panda Security PSEvents Privilege Escalation Exploit

PSEvents.exe within several Panda Security products runs hourly with SYSTEM privileges. When run, it checks a user writable folder for certain DLL files, and if any are found they are automatically run. Vulnerable products include Panda Global Protection 2016 versions 16.1.2 and below, Panda...

Panda Security URL Filtering < 4.3.1.9 - Privilege Escalation

Exploit for windows platform in category local exploits CVE: CVE-2015-7378 Vendor: Panda Security Reported by: Kyriakos Economou Date of Release: 05/04/2016 Affected Products: Multiple Affected Version: Panda Security URL Filtering v4.3.1.9 Fixed Version: Panda Security URL Filtering v4.3.1.9...

74cms(20141027)全局xss防护考虑不完善可被绕过

简要描述： 74cms20141027全局xss防护考虑不完善可被绕过 详细说明： 防护代码就不贴出来了， 代码中只考虑了 新建标签的情况 或者在a img之类的标签节点中。 但是没有考虑下面这种的情况 Var xx=”qiyeid”; 这样的话，我们就可以这样利用 Var xx=”qiyeid”;eval‘documnet.writejs 8进制编码’// 漏洞证明： 正好找到了一处存储xss。 直接贴利用方法 先来注册一个企业帐号 http://localhost/74/user/company/companyinfo.php?act=companyprofile...