Product
DesktopSMS version 1.11.0 contains a local service vulnerability allowing an unauthenticated attacker to bypass pairing and perform unauthorized SMS operations via loopback communication.