PT-2026-35351

A vulnerability was determined in HBAI-Ltd Toonflow-app up to 1.1.1. This vulnerability affects the function z.url of the file src/routes/setting/about/downloadApp.ts of the component downloadApp Endpoint. This manipulation of the argument url causes path traversal. It is possible to initiate the...

CVE-2025-9965

Improper authentication vulnerability in Novakon P series allows unauthenticated attackers to upload and download any application from/to the device.This issue affects P series: P – V2001.A.C518o2 until P-2.0.05 Build 2026.02.06 commit d0f97fd9...

CVE-2025-9965

Improper authentication vulnerability in Novakon P series allows unauthenticated attackers to upload and download any application from/to the device.This issue affects P series: P – V2001.A.C518o2 until P-2.0.05 Build 2026.02.06 commit d0f97fd9...

Gira TKS-IP-Gateway Path Traversal Vulnerability

Gira TKS-IP-Gateway is a network communication gateway product from Gira Germany. A path traversal vulnerability exists in Gira TKS-IP-Gateway version 4.0.7.7. An attacker could exploit the vulnerability to download an application database...

Multiple MacOS X bugs

Problems with launching of download application...