CVE-2019-14432

Incorrect authentication of application WebSocket connections in Loom Desktop for Mac up to 0.16.0 allows remote code execution from either malicious JavaScript in a browser or hosts on the same network, during periods in which a user is recording a video with the application. The same attack...

CVE-2019-14432

Incorrect authentication of application WebSocket connections in Loom Desktop for Mac up to 0.16.0 allows remote code execution from either malicious JavaScript in a browser or hosts on the same network, during periods in which a user is recording a video with the application. The same attack...

CVE-2019-14432

Technical details (affected product/version, root cause, exploitability, fixes) are not publicly provided in the supplied documents. Monitor for updates; no additional specifics are available here.

PT-2019-13693

Name of the Vulnerable Software and Affected Versions Loom Desktop for Mac versions up to 0.16.0 Description The issue concerns incorrect authentication of application WebSocket connections, allowing remote code execution from malicious JavaScript in a browser or hosts on the same network during...

CVE-2019-14432: Improper Authentication

Incorrect authentication of application WebSocket connections in Loom Desktop for Mac up to 0.16.0 allows remote code execution from either malicious JavaScript in a browser or hosts on the same network, during periods in which a user is recording a video with the application. The same attack...

Loom Software SurfNow 1.x/2.x Remote HTTP GET Request Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/9519/info A problem has been identified in the handling of specific types of requests by SurfNOW. Upon receiving specially crafted HTTP GET requests, it is possible for a remote attacker to crash a vulnerable...

Loom Software SurfNow 1.x2.x - GET Remote Denial of Service

Loom Software SurfNow 1.x2.x - GET Remote Denial of Service source: https://www.securityfocus.com/bid/9519/info A problem has been identified in the handling of specific types of requests by SurfNOW. Upon receiving specially crafted HTTP GET requests, it is possible for a remote attacker to crash...