We are Shielder,
an IT Security company.
We are dynamic and talented. Our specialists are our beating heart and that’s why we never stop. We adapt ourselves to an ever changing world while bearing in mind what brought us here: the need to understand each and every bit.
Inspect elementWhat we do
Rely on us,
we will raise your barriers.
Research
![[Advisory]](https://www.shielder.com//img/advisory.png)
Vtiger CRM <= 8.1.0 does not correctly check user's privileges. A low-privileged user can interact directly with the `Migration` administrative module to disable arbitrary modules in the instance.
Vtiger CRM <= 8.1.0 has a SQL injection vulnerability in the MailManager module.
Element Android (<1.6.12) is affected by an intent redirection, allowing a third-party malicious application to start any internal activity by passing extra parameters. Possible impact includes making Element Android display an arbitrary web page, executing arbitrary JavaScript, bypassing PIN code protection, and account takeover by spawning a login screen to send credentials to an arbitrary Matrix home server.
Our blog
Latest News
