CVE-2017-17684

Panda Global Protection 17.0.1 is affected by CVE-2017-17684, a denial-of-service due to a crafted 0xb3702c04 \.PSMEMDriver DeviceIoControl request that can crash the system. Public sources consistently describe a DoS impact (system crash) rather than remote code execution. Affected product line ...

CVE-2017-17684

Panda Global Protection 17.0.1 allows a system crash via a 0xb3702c04 \.\PSMEMDriver DeviceIoControl request...

Google Search Results Exploited to Distribute Zeus Panda Banking Trojan

By Waqas Until now, we believed that to advertise and promote your This is a post from HackRead.com Read the original post: Google Search Results Exploited to Distribute Zeus Panda Banking Trojan...

Poisoning the Well: Banking Trojan Targets Google Search Results

This blog post was authored by Edmund Brumaghin, Earl Carter and Emmanuel Tacheau.SummaryIt has become common for users to use Google to find information that they do not know. In a quick Google search you can find practically anything you need to know. Links returned by a Google search, however,...

Logic design flaws in Panda TV APP Android version

Panda TV mobile video client is a mobile video online playback platform jointly created by Sichuan Golden Panda New Media Co. There is a logical design loophole in the Android version of Panda TV APP, which allows attackers to register an account arbitrarily by grabbing packets and modifying the...

Panda Kernel Memory Access Driver Code Execution Vulnerability

Panda Security products is prone to a code execution vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Heap overflow

Heap-based buffer overflow in Panda Security Kernel Memory Access Driver 1.0.0.13 allows attackers to execute arbitrary code with kernel privileges via a crafted size input for allocated kernel paged pool and allocated non-paged pool buffers...

CVE-2015-1438

Heap-based buffer overflow in Panda Security Kernel Memory Access Driver 1.0.0.13 allows attackers to execute arbitrary code with kernel privileges via a crafted size input for allocated kernel paged pool and allocated non-paged pool buffers...

CVE-2015-1438

The CVE-2015-1438 entry concerns Panda Security’s Kernel Memory Access Driver (version 1.0.0.13). The connected data specifies a heap-based buffer overflow in the driver that allows an attacker to execute arbitrary code with kernel privileges by supplying a crafted size input for allocated kernel...

Panda Uconnect - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Panda Uconnect published at the 'play' market has multiple vulnerabilities...

Panda Antivirus Local Denial of Service Vulnerability

Panda Antivirus is a free antivirus program. Panda Antivirus suffers from a local denial of service vulnerability. An attacker could exploit this vulnerability to cause a denial of service...

Panda Mobile Security for iOS Man-in-the-Middle Attack Vulnerability

Panda Mobile Security for iOS is a mobile antivirus product for iOS developed by the Spanish company Panda Security. The product protects mobile networks from viruses, spyware, hackers and other Internet threats. A security vulnerability exists in version 1.1 of Panda Mobile Security for iOS. An...

CVE-2017-8060

Acceptance of invalid/self-signed TLS certificates in "Panda Mobile Security" 1.1 for iOS allows a man-in-the-middle and/or physically proximate attacker to silently intercept information sent during the login API call...

CVE-2017-8060

Acceptance of invalid/self-signed TLS certificates in "Panda Mobile Security" 1.1 for iOS allows a man-in-the-middle and/or physically proximate attacker to silently intercept information sent during the login API call...

CVE-2017-8060

Acceptance of invalid/self-signed TLS certificates in "Panda Mobile Security" 1.1 for iOS allows a man-in-the-middle and/or physically proximate attacker to silently intercept information sent during the login API call...

CVE-2017-8060

The CVE describes a flaw in Panda Mobile Security for iOS 1.1 where the app accepts invalid/self-signed TLS certificates, enabling a man-in-the-middle to silently intercept data during the login API call. The connected CNVD/CNVD-related entries corroborate the same vulnerable behavior, focusing o...

Panda Free Antivirus - PSKMAD.sys Denial of Service Exploit

Exploit for windows platform in category dos / poc / Exploit Title: Panda Cloud Antivirus Free - 'PSKMAD.sys' - BSoD - denial of service Date: 2017-04-29 Exploit Author: Peter baris Vendor Homepage: http://www.saptech-erp.com.au Software Link:...

CVE-2017-8339

PSKMAD.sys in Panda Free Antivirus 18.0 allows local users to cause a denial of service BSoD via a crafted DeviceIoControl request to \.\PSMEMDriver...

Design/Logic Flaw

PSKMAD.sys in Panda Free Antivirus 18.0 allows local users to cause a denial of service BSoD via a crafted DeviceIoControl request to \.\PSMEMDriver...

CVE-2017-8339

PSKMAD.sys in Panda Free Antivirus 18.0 allows local users to cause a denial of service BSoD via a crafted DeviceIoControl request to \.\PSMEMDriver...