tobesoft Co.,Ltd — Vulnerabilities & Security Advisories 3

Tobesoft Co.,Ltd develops low-code/no-code platforms enabling rapid application development with visual programming tools. Historically, their products have been susceptible to remote code execution, cross-site scripting, and privilege escalation vulnerabilities, often stemming from insufficient input validation and access control flaws. The company has three CVEs on record, including critical RCE flaws in their ToBase product that could allow attackers to execute arbitrary code with system privileges. While no major public security incidents have been documented, the recurring nature of these vulnerabilities suggests a need for enhanced security testing and input sanitization in their development lifecycle.