Ruby WEBrick read_header HTTP Request Smuggling Vulnerability (CVE-2025-6442)
– This vulnerability allows remote attackers to smuggle arbitrary HTTP requests on affected installations of Ruby WEBrick.
Read MoreCyber Security
Articles on SystemTek’s website that relate to cyber security.
Delta Electronics CNCSoft-G2 DPAX File Parsing Memory Corruption Remote Code Execution Vulnerability (CVE-2025-47728)
– This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics CNCSoft-G2.
Read More
Cisco Meraki MX and Z Series AnyConnect VPN Authentication Denial of Service Vulnerability (CVE-2025-20271)
– A vulnerability in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition in the Cisco AnyConnect service on an affected device.
Read More
ClamAV UDF File Parsing Out-of-Bounds Read Information Disclosure Vulnerability (CVE-2025-20234)
CVE number = CVE-2025-20234 A vulnerability in Universal Disk Format (UDF) processing of ClamAV could allow an unauthenticated, remote attacker
Read More
New plans to supercharge UK cyber sector
– The UK’s growing and cutting edge cyber security sector will be boosted by millions in new investment and a roadmap for growth, as part of the Plan for Change.
Read More
Siemens TeleControl Server Basic CreateTrace SQL Injection Remote Code Execution Vulnerability (CVE-2025-27495)
– This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens TeleControl Server Basic.
Read More
Microsoft WEBDAV Remote Code Execution Vulnerability (CVE-2025-33053)
– A newly discovered critical zero-day remote code execution (RCE) vulnerability in Microsoft Windows, identified as CVE-2025-33053, is being actively exploited by the Stealth Falcon advanced persistent threat (APT) group, also known as FruityArmor.
Read MoreUbiquiti Networks UniFi Console Missing Authentication for Critical Function Authentication Bypass Vulnerability (CVE-2025-23116)
– This vulnerability allows network-adjacent attackers to bypass authentication on affected Ubiquiti Networks UniFi Console devices.
Read More
Ubiquiti Networks AI Bullet Insufficient Firmware Update Validation Remote Code Execution Vulnerability (CVE-2025-23117)
– This vulnerability allows network-adjacent attackers to execute arbitrary code on affected Ubiquiti Networks AI Bullet Cameras.
Read More
External Apps Can Exploit OneDrive Security Flaw
– Websites that support OneDrive file uploads—such as ChatGPT, Slack, Trello, ClickUp, Zoom, and others—can gain access to a user’s entire OneDrive account, not just the files selected for upload. This access may persist for extended periods.
Read More