canada.michaels.com Cross Site Scripting vulnerability OBB-3390434

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

michelemichaelsphotography.com Cross Site Scripting vulnerability OBB-3213209

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

michaels-optical.com Cross Site Scripting vulnerability OBB-3213198

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Michaels Data Breach Under Investigation

Officials at Michaels, the large craft and home goods retailer, are investigating a potential data breach that has apparently affected an unknown number of cards used in the chain’s stores in the last few weeks. The company has released very little detail about the compromise but said that it is...

Possible Data Breach at Arts and Crafts Retailer 'Michaels Store'

Western landscapes are facing a hell lot of data breaches started with Target, Neiman Marcus and now country's largest crafts chain 'Michael’s Art and Crafts' may be is the latest retailer hit by a security breach. In a statement, Irving, Texas-based company acknowledged a possible data security...

Unfixed XSS vulnerability at www.michaels.com

Security researcher dblackshell, has submitted on 10/11/2007 a cross-site-scripting XSS vulnerability affecting www.michaels.com, which at the time of submission ranked 18408 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/11/2007. It is...