Winston Privacy Elevation of Privilege Vulnerability

Winston Privacy is a hardware VPN device from the American company Winston Privacy. Winston version 1.5.4 suffers from an elevation of privilege vulnerability that stems from the device having an over-authorized local www-data user, resulting in root privilege escalation. No detailed vulnerabilit...

CVE-2019-15099

A null pointer dereference flaw was discovered in the Linux kernel's implementation of the ath10k USB device driver. The vulnerability requires the attacker to plug in a specially crafted hardware device that present endpoint descriptors that normal ath10k devices do not recognize. System...

CVE-2019-5616

CVE-2019-5616 affects CircuitWerkes Sicon-8, a hardware device with a web-based front-end. The vulnerability is a client-side authentication flaw implemented in JavaScript running in the user’s browser, resulting in a read-only authentication bypass. According to the available sources, this is ne...

[SECURITY] Fedora 9 Update: dahdi-tools-2.0.0-1.fc9

DAHDI stands for Digium Asterisk Hardware Device Interface. This package contains the userspace tools to configure the DAHDI kernel modules. DAHDI is the replacement for Zaptel, which must be renamed due to trademark issues...