GDI+ in Microsoft Windows and Office fails to properly handle TIFF images, allowing remote code execution through crafted documents, actively exploited in targeted attacks against Pakistani and Middle Eastern organizations.
RCE
Microsoft
Code Injection
NVD
Exploit-DB
VulDB
CVSS 3.1
7.8
EPSS
92.6%
Threat
9.3
SQL injection vulnerability in Tiki Wiki CMS Groupware 6 LTS before 6.13LTS, 9 LTS before 9.7LTS, 10.x before 10.4, and 11.x before 11.1 allows remote attackers to execute arbitrary SQL commands via. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
SQLi
Tikiwiki Cms Groupware
Tiki
NVD
CVSS 2.0
7.5
EPSS
0.4%