CVE-2018-13257

The bb-auth-provider-cas authentication module within Blackboard Learn 2018-07-02 is susceptible to HTTP host header spoofing during Central Authentication Service CAS service ticket validation, enabling a phishing attack from the CAS server login page...

Design/Logic Flaw

The bb-auth-provider-cas authentication module within Blackboard Learn 2018-07-02 is susceptible to HTTP host header spoofing during Central Authentication Service CAS service ticket validation, enabling a phishing attack from the CAS server login page...

CVE-2018-13257

The bb-auth-provider-cas authentication module within Blackboard Learn 2018-07-02 is susceptible to HTTP host header spoofing during Central Authentication Service CAS service ticket validation, enabling a phishing attack from the CAS server login page...

CVE-2018-13257

The CVE-2018-13257 vulnerability affects Blackboard Learn (2018-07-02) in the bb-auth-provider-cas authentication module. The issue is HTTP host header spoofing during CAS service ticket validation, enabling a phishing attack from the CAS server login page. Connected records consistently describe...

learn-php.me XSS vulnerability

Open Bug Bounty ID: OBB-618663 Description| Value ---|--- Affected Website:| learn-php.me Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Blackboard Learn Redirection Vulnerability

Blackboard Learn is a suite of online collaborative learning solutions from Blackboard USA. A security vulnerability exists in versions of Blackboard Learn prior to 10/17/2017. A remote attacker can exploit the vulnerability by constructing a URL that redirects the user's browser to an arbitrary...

CVE-2017-18262

Blackboard Learn Since at least 17th of October 2017 has allowed Unvalidated Redirects on any signed-in user through its endpoints for handling Shibboleth logins, as demonstrated by a webapps/bb-auth-provider-shibboleth-BBLEARN/execute/shibbolethLogin?returnUrl= URI...

CVE-2017-18262

Blackboard Learn Since at least 17th of October 2017 has allowed Unvalidated Redirects on any signed-in user through its endpoints for handling Shibboleth logins, as demonstrated by a webapps/bb-auth-provider-shibboleth-BBLEARN/execute/shibbolethLogin?returnUrl= URI...

Code injection

Blackboard Learn Since at least 17th of October 2017 has allowed Unvalidated Redirects on any signed-in user through its endpoints for handling Shibboleth logins, as demonstrated by a webapps/bb-auth-provider-shibboleth-BBLEARN/execute/shibbolethLogin?returnUrl= URI...

CVE-2017-18262

CVE-2017-18262 affects Blackboard Learn; unvalidated redirects exist via the Shibboleth login flow. The vulnerable endpoint is BLACKBOARD/webapps/bb-auth-provider-shibboleth-BBLEARN/execute/shibbolethLogin?returnUrl=, which can redirect signed-in users to an arbitrary URL. Connected sources corro...

CVE-2017-18262

Blackboard Learn Since at least 17th of October 2017 has allowed Unvalidated Redirects on any signed-in user through its endpoints for handling Shibboleth logins, as demonstrated by a webapps/bb-auth-provider-shibboleth-BBLEARN/execute/shibbolethLogin?returnUrl= URI...

Blackboard Learn Open Redirect

CVE-2017-18262 Description Since at least the 17th of October 2017 Initial report date Blackboard Learn has allowed Unvalidated Redirects on any signed in user through its endpoints for handling Shibboleth logins. The vulnerable endpoint is:...

CVE-2018-13257

The bb-auth-provider-cas authentication module within Blackboard Learn 2018-07-02 is susceptible to HTTP host header spoofing during Central Authentication Service CAS service ticket validation, enabling a phishing attack from the CAS server login page...

ABC for kids – learn Alphabet - Base64 encoded String, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application ABC for kids – learn Alphabet published at the 'play' market has multiple vulnerabilities...

Learn English with Barney - Base64 encoded String, Customized SSL vulnerabilities

HackApp vulnerability scanner discovered that application Learn English with Barney published at the 'play' market has multiple vulnerabilities...

Learn Chinese - 50 languages - Dynamic Code Loading, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Learn Chinese - 50 languages published at the 'play' market has multiple vulnerabilities...

Kids Learn to Read (Lite) - External URLs, Native code usage, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Kids Learn to Read Lite published at the 'play' market has multiple vulnerabilities...

Tree Fu Tom: Play and Learn - Base64 encoded String, Customized SSL, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Tree Fu Tom: Play and Learn published at the 'play' market has multiple vulnerabilities...

Learn alphabet & learn letters - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Learn alphabet & learn letters published at the 'play' market has multiple vulnerabilities...

Learn numbers for toddlers - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Learn numbers for toddlers published at the 'play' market has multiple vulnerabilities...