GDI+ in Microsoft Windows and Office fails to properly handle TIFF images, allowing remote code execution through crafted documents, actively exploited in targeted attacks against Pakistani and Middle Eastern organizations.
Code Injection
Microsoft
RCE
NVD
Exploit-DB
VulDB
CVSS 3.1
7.8
EPSS
92.6%
Threat
9.3
SQL injection vulnerability in Tiki Wiki CMS Groupware 6 LTS before 6.13LTS, 9 LTS before 9.7LTS, 10.x before 10.4, and 11.x before 11.1 allows remote attackers to execute arbitrary SQL commands via. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
SQLi
Tikiwiki Cms Groupware
NVD
CVSS 2.0
7.5
EPSS
0.4%