CVE-2025-67231: Improper Neutralization of Input During Web Page Generation

A reflected cross-site scripting XSS vulnerability in ToDesktop Builder v0.33.1 allows attackers to execute arbitrary code in the context of a user's browser via a crafted payload...

PT-2026-4496

Name of the Vulnerable Software and Affected Versions ToDesktop Builder version 0.32.1 Description An improper certificate validation issue exists that could allow an unauthenticated attacker to spoof backend responses. This is possible due to insufficient certificate validation. An on-path...

CVE-2025-67229

ToDesktop Builder version 0.32.1 is susceptible to an improper certificate validation vulnerability. Due to insufficient certificate verification, an unauthenticated, on-path attacker can spoof backend responses. While exploitation details and specific exploit links are not provided, the vulnerab...

CVE-2025-67230

Improper permissions in the handler for the Custom URL Scheme in ToDesktop Builder v0.33.0 allows attackers with renderer-context access to invoke external protocol handlers without sufficient validation...

CVE-2025-67230

ToDesktop Builder version 0.33.0 is vulnerable to a flaw in its Custom URL Scheme handler . Due to insufficient validation, attackers who gain renderer-context access can invoke external protocol handlers, potentially compromising the system. Remediation involves updating to a newer version that ...