Lucene search
K

7 matches found

Github Security Blog
Github Security Blog
added 2025/09/05 6:30 a.m.7 views

TkEasyGUI Affected by Uncontrolled Search Path Element Issue

Uncontrolled search path element issue exists in TkEasyGUI versions prior to v1.0.22. If this vulnerability is exploited, arbitrary code may be executed with the privilege of running the program...

8.5CVSS7.5AI score0.00025EPSS
Exploits0References4Affected Software1
Github Security Blog
Github Security Blog
added 2025/09/05 6:30 a.m.5 views

TkEasyGUI Vulnerable to OS Command Injection

Improper neutralization of special elements used in an OS command 'OS Command Injection' issue exists in TkEasyGUI versions prior to v1.0.22. If this vulnerability is exploited, an arbitrary OS command may be executed by a remote unauthenticated attacker if the settings are configured to construc...

9.8CVSS7.3AI score0.00379EPSS
Exploits0References4Affected Software1
OSV
OSV
added 2025/09/05 6:15 a.m.1 views

CVE-2025-55671

Uncontrolled search path element issue exists in TkEasyGUI versions prior to v1.0.22. If this vulnerability is exploited, arbitrary code may be executed with the privilege of running the program...

8.5CVSS7.5AI score
Exploits0References2
Cvelist
Cvelist
added 2025/09/05 5:24 a.m.8 views

CVE-2025-55671

Uncontrolled search path element issue exists in TkEasyGUI versions prior to v1.0.22. If this vulnerability is exploited, arbitrary code may be executed with the privilege of running the program...

8.5CVSS0.00025EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/09/05 5:24 a.m.1 views

CVE-2025-55671

Uncontrolled search path element issue exists in TkEasyGUI versions prior to v1.0.22. If this vulnerability is exploited, arbitrary code may be executed with the privilege of running the program...

8.5CVSS7AI score0.00025EPSS
Exploits0References2
CVE
CVE
added 2025/09/05 5:24 a.m.10 views

CVE-2025-55037

TkEasyGUI (Python) has an OS command injection vulnerability (CVE-2025-55037) affecting versions prior to v1.0.22. The issue arises from improper neutralization of special elements used in OS commands, enabling a remote unauthenticated attacker to execute arbitrary commands when messages are cons...

9.8CVSS6.8AI score0.00379EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/09/05 12:0 a.m.3 views

PT-2025-36112

Name of the Vulnerable Software and Affected Versions: TkEasyGUI versions prior to 1.0.22 Description: An uncontrolled search path element issue exists that may lead to arbitrary code execution with the privileges of the running program. Recommendations: Update TkEasyGUI to version 1.0.22 or late...

8.5CVSS8.2AI score0.00025EPSS
Exploits0References10
Rows per page
Query Builder