Heap overflow

Heap-based buffer overflow in Panda Security Kernel Memory Access Driver 1.0.0.13 allows attackers to execute arbitrary code with kernel privileges via a crafted size input for allocated kernel paged pool and allocated non-paged pool buffers...

CVE-2015-1438

Heap-based buffer overflow in Panda Security Kernel Memory Access Driver 1.0.0.13 allows attackers to execute arbitrary code with kernel privileges via a crafted size input for allocated kernel paged pool and allocated non-paged pool buffers...

CVE-2015-1438

The CVE-2015-1438 entry concerns Panda Security’s Kernel Memory Access Driver (version 1.0.0.13). The connected data specifies a heap-based buffer overflow in the driver that allows an attacker to execute arbitrary code with kernel privileges by supplying a crafted size input for allocated kernel...

PT-2017-6489

Name of the Vulnerable Software and Affected Versions Panda Security Kernel Memory Access Driver version 1.0.0.13 Description A heap-based buffer overflow issue allows attackers to execute arbitrary code with kernel privileges. This is achieved by providing a crafted size input for allocated kern...

CVE-2015-1438: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in Panda Security Kernel Memory Access Driver 1.0.0.13 allows attackers to execute arbitrary code with kernel privileges via a crafted size input for allocated kernel paged pool and allocated non-paged pool buffers...

Panda Security URL Filtering Privilege Escalation Vulnerability

Panda Security URL Filtering is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Panda Security URL Filtering Service Detection (Windows SMB Login)

Detects the installed version of Panda Security URL Filtering Service. The script logs in via smb, searches for executable of Panda Security URL Filtering SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Panda Security PSEvents Privilege Exploit

Panda Security PSEvents is a security product from the Spanish company Panda Security. The product protects devices from viruses, spyware, hackers, and other Internet threats. PSEvents suffers from a privilege extraction vulnerability that can be exploited by attackers to gain administrator...

Panda Security PSEvents Privilege Escalation Exploit

PSEvents.exe within several Panda Security products runs hourly with SYSTEM privileges. When run, it checks a user writable folder for certain DLL files, and if any are found they are automatically run. Vulnerable products include Panda Global Protection 2016 versions 16.1.2 and below, Panda...

Panda Security PSEvents Privilege Escalation

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'msf/core/exploit/exe' class MetasploitModule 'Panda Security PSEvents Privilege Escalation', 'Description' = %q PSEvents.exe within several...

Elevation of Privilege Vulnerability in Multiple Panda Products

Panda Security Gold Protection, Panda Small Business Protection, Panda Internet Security and Panda Antivirus Pro are antivirus products from the Spanish company Panda Security. Panda Security The products protect all devices from viruses, spyware, hackers and other Internet threats. An elevation ...

Local Code Execution Vulnerability in Multiple Panda Security Products

Panda Security Panda Global Protection and others are antivirus products from the Spanish company Panda Security. The products protect all devices from viruses, spyware, hackers and other Internet threats. A local code execution vulnerability exists in several Panda Security products. A local...

Panda Security (Multiple Products) - Local Privilege Escalation

Panda Security Multiple Products - Local Privilege Escalation Exploit Title: Panda Security Privilege Escalation Date: 27/6/2016 Exploit Author: Security-Assessment.com Vendor Homepage: http://www.pandasecurity.com Version: Panda Global Protection 2016 16.1.2,Panda Antivirus Pro 2016 16.1.2,Panda...

Panda Security Multiple Products - Privilege Escalation

Exploit for windows platform in category local exploits Exploit Title: Panda Security Privilege Escalation Date: 27/6/2016 Exploit Author: Security-Assessment.com Vendor Homepage: http://www.pandasecurity.com Version: Panda Global Protection 2016 16.1.2,Panda Antivirus Pro 2016 16.1.2,Panda Small...

Panda Security PSEvents Privilege Escalation

PSEvents.exe within several Panda Security products runs hourly with SYSTEM privileges. When run, it checks a user writable folder for certain DLL files, and if any are found they are automatically run. Vulnerable Products: Panda Global Protection 2016 use exploit/windows/local/panda/psevents msf...

Panda Security (Multiple Products) - Local Privilege Escalation

Exploit Title: Panda Security Privilege Escalation Date: 27/6/2016 Exploit Author: Security-Assessment.com Vendor Homepage: http://www.pandasecurity.com Version: Panda Global Protection 2016 16.1.2,Panda Antivirus Pro 2016 16.1.2,Panda Small Business Protection 16.1.2,Panda Internet Security 2016...

Panda Security URL Filtering < v4.3.1.9 本地提权漏洞

No description provided by source...

CVE-2016-3943

Panda Endpoint Administration Agent before 7.50.00, as used in Panda Security for Business products for Windows, uses a weak ACL for the Panda Security/WaAgent directory and sub-directories, which allows local users to gain SYSTEM privileges by modifying an executable module...

CVE-2015-7378

Panda Security URL Filtering before 4.3.1.9 uses a weak ACL for the "Panda Security URL Filtering" directory and installed files, which allows local users to gain SYSTEM privileges by modifying PandaURLFilteringb.exe...

Design/Logic Flaw

Panda Endpoint Administration Agent before 7.50.00, as used in Panda Security for Business products for Windows, uses a weak ACL for the Panda Security/WaAgent directory and sub-directories, which allows local users to gain SYSTEM privileges by modifying an executable module...