CVE-2024-7244

CVE-2024-7244 affects Panda Security Dome VPN. The vulnerability is a DLL hijacking flaw in the VPN process caused by not restricting DLL search to trusted paths, enabling a local attacker who can execute low-privilege code to load a malicious DLL and escalate to SYSTEM. Root cause: untrusted DLL...

CVE-2024-7243 Panda Security Dome Link Following Local Privilege Escalation Vulnerability

Panda Security Dome Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Panda Security Dome. An attacker must first obtain the ability to execute low-privileged code on the target system in order to...

CVE-2024-7243

CVE-2024-7243 affects Panda Security Dome via the PSANHost executable. The flaw allows a local attacker who can run low-privileged code to craft a junction and abuse the service to create arbitrary files, enabling privilege escalation to SYSTEM and arbitrary code execution. This is a local privil...

CVE-2024-7243 Panda Security Dome Link Following Local Privilege Escalation Vulnerability

Panda Security Dome Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Panda Security Dome. An attacker must first obtain the ability to execute low-privileged code on the target system in order to...

Panda Security Dome 后置链接漏洞

Panda Security Dome is an antivirus product for ransomware and spyware from Spanish company Panda Security. Panda Security Dome suffers from a back-linking vulnerability, which stems from a link-following mechanism in the PSANHost executable, that could allow a local attacker to elevate privilege...

Panda Security Dome 后置链接漏洞

Panda Security Dome is an antivirus product for ransomware and spyware from Spanish company Panda Security. Panda Security Dome suffers from a back-linking vulnerability that originates from the link-following mechanism in the PSANHost executable, which could lead to a local attacker deleting an...

Panda Security Dome 代码问题漏洞

Panda Security Dome is an antivirus product for ransomware and spyware from Spanish company Panda Security. A code issue vulnerability exists in Panda Security Dome, which arises from an improper restriction of the DLL search path by the VPN process, which could lead to a local attacker loading a...

Panda Security Dome 安全漏洞

Panda Security Dome is an antivirus product for ransomware and spyware from the Spanish company Panda Security. A security vulnerability exists in Panda Security Dome that stems from a lack of proper permission settings for folders created by the Hydra Sdk Windows service, which could allow a loc...

China-Backed Hackers Leverage SIGTRAN, GSM Protocols to Infiltrate Telecom Networks

A new China-linked cyber espionage group has been attributed as behind a series of targeted cyber attacks targeting telecommunications entities in South Asia and Africa since at least 2020 with the goal of enabling intelligence collection. Cybersecurity company CrowdStrike is tracking the adversa...

Panda Security Dome PSANHost Link Following Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Panda Security Dome. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Application...

Panda Security Dome PSANHost Link Following Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Panda Security Dome. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Application...

CVE-2024-8424

Improper Privilege Management vulnerability in WatchGuard EPDR, Panda AD360 and Panda Dome on Windows PSANHost.exe module allows arbitrary file delete with SYSTEM permissions. This issue affects EPDR: before 8.00.23.0000; Panda AD360: before 8.00.23.0000; Panda Dome: before 22.03.00...

WatchGuard多款产品 安全漏洞

WatchGuard EPDR and others are products of WatchGuard USA.WatchGuard EPDR is an application.WatchGuard Panda AD360 is an advanced cybersecurity solution that integrates EPP, EDR and machine learning technologies.WatchGuard Panda Dome is an antivirus program. A security vulnerability exists in...

CVE-2024-8424

CVE-2024-8424 affects WatchGuard EPDR, Panda AD360, and Panda Dome on Windows via the PSANHost.exe module. The vulnerability is a local privilege escalation caused by improper privilege management, enabling arbitrary file deletion with SYSTEM permissions. Affected versions: EPDR before 8.00.23.00...

CVE-2024-8424 WatchGuard Endpoint Protection Privilege Escalation in PSANHost Enables Arbitrary File Delete as SYSTEM

Improper Privilege Management vulnerability in WatchGuard EPDR, Panda AD360 and Panda Dome on Windows PSANHost.exe module allows arbitrary file delete with SYSTEM permissions. This issue affects EPDR: before 8.00.23.0000; Panda AD360: before 8.00.23.0000; Panda Dome: before 22.03.00...

CVE-2024-8424 WatchGuard Endpoint Protection Privilege Escalation in PSANHost Enables Arbitrary File Delete as SYSTEM

Improper Privilege Management vulnerability in WatchGuard EPDR, Panda AD360 and Panda Dome on Windows PSANHost.exe module allows arbitrary file delete with SYSTEM permissions. This issue affects EPDR: before 8.00.23.0000; Panda AD360: before 8.00.23.0000; Panda Dome: before 22.03.00...

PT-2024-39002 · Watchguard +1 · Watchguard Epdr +2

Name of the Vulnerable Software and Affected Versions: WatchGuard EPDR versions prior to 8.00.23.0000 Panda AD360 versions prior to 8.00.23.0000 Panda Dome versions prior to 22.03.00 Description: The issue is related to improper privilege management, allowing local attackers to escalate privilege...

THN Recap: Top Cybersecurity Threats, Tools, and Practices (Oct 28 - Nov 03)

This week was a total digital dumpster fire! Hackers were like, "Let's cause some chaos!" and went after everything from our browsers to those fancy cameras that zoom and spin. You know, the ones they use in spy movies? 🕵️‍♀️ We're talking password-stealing bots, sneaky extensions that spy on you,...

Chinese Hackers Use CloudScout Toolset to Steal Session Cookies from Cloud Services

A government entity and a religious organization in Taiwan were the target of a China-linked threat actor known as Evasive Panda that infected them with a previously undocumented post-compromise toolset codenamed CloudScout. "The CloudScout toolset is capable of retrieving data from various cloud...

China-Linked CeranaKeeper Targeting Southeast Asia with Data Exfiltration

A previously undocumented threat actor called CeranaKeeper has been linked to a string of data exfiltration attacks targeting Southeast Asia. Slovak cybersecurity firm ESET, which observed campaigns targeting governmental institutions in Thailand starting in 2023, attributed the activity cluster ...