Published Vulnerabilities

Trend Micro DirectPass 1.5.0.x – Software Vulnerabilities

The security researcher Benjamin Kunz Mejri from Vulnerability Lab have identified in march a security flaw in Trend Micro’s popular password manager cloud software “DirectPass”. DirectPass v1.5.0.1060 manages customer website and account passwords or login IDs in one secure location of Trend Micro's cloud network. The software provides Keystroke encryption, confidential notes, secure password generation and a secure browser engine module. The reported vulnerability affects the new password cloud software of Trend Micro.

0Day Vulnerabilities in Microsofts Skype Account System

Today we want to talk about the last microsoft 0day vulnerabilities in the core of the skype account system. Last days we published two amazing remote vulnerabilities in microsofts official skype account service application affecting 670+ million user accounts. Both vulnerabilities has been discovered to the microsoft security response center (MSRC ID: 13050[bc] & 13175).

The first vulnerability was an account reset vulnerability in the account login system of skype.