CVE-2025-34109

This is a detailed advisory describing a local privilege escalation vulnerability in multiple Panda Security products due to insecure DLL loading by the PSEvents.exe process. The writeup explains the exploitation method but does not include actual exploit code.

This Metasploit module exploits a DLL hijacking vulnerability in Panda Security products where PSEvents.exe runs with SYSTEM privileges and loads DLLs from a user-writable directory. The exploit uploads a malicious DLL to the target path and waits for the scheduled task to execute it, achieving local privilege escalation.