CVE-2018-6321

Unquoted Windows search path vulnerability in the pandaurlfiltering service in Panda Global Protection 17.0.1 allows local users to gain privileges via a malicious artefact...

CVE-2018-6322

Panda Global Protection 17.0.1 allows local users to gain privileges or cause a denial of service by impersonating all the pipes through a use of .\pipe\PSANMSrvcPpal -- an "insecurely created named pipe." Ensures full access to Everyone users group...

Design/Logic Flaw

Panda Global Protection 17.0.1 allows local users to gain privileges or cause a denial of service by impersonating all the pipes through a use of .\pipe\PSANMSrvcPpal -- an "insecurely created named pipe." Ensures full access to Everyone users group...

CVE-2018-6321

Unquoted Windows search path vulnerability in the pandaurlfiltering service in Panda Global Protection 17.0.1 allows local users to gain privileges via a malicious artefact...

CVE-2018-6322

Panda Global Protection 17.0.1 allows local users to gain privileges or cause a denial of service by impersonating all the pipes through a use of .\pipe\PSANMSrvcPpal -- an "insecurely created named pipe." Ensures full access to Everyone users group...

CVE-2018-6321

CVE-2018-6321 : Connected sources confirm a local privilege escalation in Panda Global Protection 17.0.1, via an unquoted Windows search path in the panda_url_filtering service. The vulnerability is triggered by placing a malicious artefact, allowing a local user to gain higher privileges. Root c...

CVE-2018-6322

Affected product : Panda Global Protection 17.0.1. Vulnerability : Local privilege escalation via impersonation of the insecurely created named pipe \dot-\pipe\PSANMSrvcPpal, granting full access to the Everyone group and enabling privilege gain or DoS. Root cause : Insecurely created named pipe ...

Panda Global Security 17.0.1 NULL DACL Grants Full Access

===== Tempest Security Intelligence - ADV-17/2018 === Panda Global Security 17.0.1 - NULL DACL grants full access ------------------------------------------------------- Author: - Filipe Xavier Oliveira: ===== Table of Contents ===================================================== Overview Detail...

Panda Global Security 17.0.1 Unquoted Service Path

===== Tempest Security Intelligence - ADV-18/2018 === Panda Global Security 17.0.1 - Unquoted service path ------------------------------------------------------- Author: - Filipe Xavier Oliveira: sc qc pandaurlfiltering SERVICENAME: pandaurlfiltering TYPE : 10 WIN32OWNPROCESS STARTTYPE : 2...

panda-ticket.com XSS vulnerability

Open Bug Bounty ID: OBB-488418 Description| Value ---|--- Affected Website:| panda-ticket.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure...

Panda Global Protection <= 17.00.01 DoS Vulnerability

Panda Global Protection through 17.00.01 is vulnerable to multiple vulnerabilities that can cause a system crash. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Panda Global Protection Denial of Service Vulnerability

Panda Global Protection is a suite of antivirus software from the Spanish company Panda Security. The software protects devices from viruses, spyware, hackers and other Internet threats. A security vulnerability exists in Panda Global Protection version 17.0.1. An attacker can exploit this...

Panda Global Protection Denial of Service Vulnerability (CNVD-2018-00586)

Panda Global Protection is a suite of antivirus software from the Spanish company Panda Security. The software protects devices from viruses, spyware, hackers and other Internet threats. A denial of service vulnerability exists in Panda Global Protection version 17.0.1. An attacker can exploit th...

CVE-2017-17683

Panda Global Protection 17.0.1 allows a system crash via a 0xb3702c44 \.\PSMEMDriver DeviceIoControl request...

CVE-2017-17683

Panda Global Protection 17.0.1 allows a system crash via a 0xb3702c44 \.\PSMEMDriver DeviceIoControl request...

CVE-2017-17684

Panda Global Protection 17.0.1 allows a system crash via a 0xb3702c04 \.\PSMEMDriver DeviceIoControl request...

CVE-2017-17684

Panda Global Protection 17.0.1 allows a system crash via a 0xb3702c04 \.\PSMEMDriver DeviceIoControl request...

Cross site request forgery (csrf)

Panda Global Protection 17.0.1 allows a system crash via a 0xb3702c04 \.\PSMEMDriver DeviceIoControl request...

Cross site request forgery (csrf)

Panda Global Protection 17.0.1 allows a system crash via a 0xb3702c44 \.\PSMEMDriver DeviceIoControl request...

CVE-2017-17683

Panda Global Protection 17.0.1 allows a system crash via a 0xb3702c44 \.\PSMEMDriver DeviceIoControl request...