win-cli-mcp-server resolveCommandPath Command Injection Remote Code Execution Vulnerability (CVE-2025-11202)
– This vulnerability allows remote attackers to execute arbitrary code on affected installations of win-cli-mcp-server.
Read MoreCyber Security
Articles on SystemTek’s website that relate to cyber security.
Ivanti Endpoint Manager EFile Directory Traversal Remote Code Execution Vulnerability (CVE-2025-9712)
– This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Endpoint Manager.
Read More
Linux Kernel ksmbd generate_key context.iov_base Null Pointer Dereference Denial-of-Service Vulnerability (CVE-2025-38562)
– This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of the Linux Kernel.
Read More
Fortinet FortiWeb _cmf_get_config_file_path Directory Traversal Information Disclosure Vulnerability (CVE-2025-53609)
– This vulnerability allows remote attackers to disclose sensitive information on affected installations of Fortinet FortiWeb.
Read More
The Growing Role of Animation in Cybersecurity Training
– Cybersecurity awareness is becoming more important than ever as threats grow in scale and complexity. Organisations often struggle to provide training that not only explains technical concepts but also ensures staff remember them when faced with real-world challenges.
Read More
Cisco Secure Firewall Adaptive Security Appliance Software and Secure Firewall Threat Defense Software VPN Web Server Remote Code Execution Vulnerability
– A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an authenticated, remote attacker to execute arbitrary code on an affected device.
Read MoreMultiple Cisco products affected by Remote Code Execution Vulnerability (CVE-2025-20363)
– This vulnerability is due to improper validation of user-supplied input in HTTP requests.
Read More
UK arrest following aerospace cyber incident
– A man has been arrested in the UK by the National Crime Agency as part of an investigation into a cyber incident impacting Collins Aerospace.
Read MoreApple macOS OGG Audio File Header Parsing Memory Corruption Remote Code Execution Vulnerability (CVE-2025-43346)
– This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS.
Read More
Apple Safari IPC Connection Invalidation Use-After-Free Information Disclosure Vulnerability (CVE-2025-43368)
CVE number = CVE-2025-43368 This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple Safari. User
Read More