CVE-2024-13043

Panda Security Dome Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Panda Security Dome. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Hotspot Shield. By creating a junction, an attacker can abuse the application to delete arbitrary files. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-23478.

• CWE-59

• https://www.zerodayinitiative.com/advisories/ZDI-24-1727/Third Party Advisory

Published

Dec 30, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-13038A vulnerability was found in CodeAstro Simple Loan Managemen…9.8
• CVE-2024-13039A vulnerability was found in code-projects Simple Chat Syste…8.8
• CVE-2024-1304Cross-site scripting vulnerability in Badger Meter Monitool …6.1
• CVE-2024-13040The QOCA aim from Quanta Computer has an Authorization Bypas…8.8
• CVE-2024-13041An issue was discovered in GitLab CE/EE affecting all versio…5.4
• CVE-2024-13042A vulnerability was found in Tsinghua Unigroup Electronic Ar…5.3
• CVE-2024-13044Ashlar-Vellum Cobalt AR File Parsing Out-Of-Bounds Write Rem…7.8
• CVE-2024-13045Ashlar-Vellum Cobalt AR File Parsing Stack-based Buffer Over…7.8
• CVE-2024-13046Ashlar-Vellum Cobalt CO File Parsing Out-Of-Bounds Write Rem…7.8
• CVE-2024-13047Ashlar-Vellum Cobalt CO File Parsing Type Confusion Remote C…7.8
• CVE-2024-13048Ashlar-Vellum Cobalt XE File Parsing Out-Of-Bounds Write Rem…7.8
• CVE-2024-13049Ashlar-Vellum Cobalt XE File Parsing Type Confusion Remote C…7.8