staples-lab.de Improper Access Control vulnerability OBB-3769477

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

staples-collect.com Cross Site Scripting vulnerability OBB-3479108

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Jenkins 2.335 < 2.356 Information Disclosure Vulnerability (SECURITY-2777) - Linux

Jenkins is prone to an information disclosure vulnerability. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software;...

This Week in Security News: AWS Outposts Ready Launches With 32 Validated Partners and Staples Hit by a Data Breach

Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. This week, learn about how solutions from 32 Amazon Web Services partners – including Trend Micro – are now available for AWS customers to use with the...

holidaycards.staples.com Cross Site Scripting vulnerability

Security Researcher SamPlusPlus Helped patch 1 vulnerabilities Received 0 Coordinated Disclosure badges , found a security vulnerability affecting holidaycards.staples.com website and its users. Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard,...

staples.com XSS vulnerability

Open Bug Bounty ID: OBB-441747 Description| Value ---|--- Affected Website:| staples.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

m.staples.com XSS vulnerability

Open Bug Bounty ID: OBB-316666 Description| Value ---|--- Affected Website:| m.staples.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

careers.staples.in XSS vulnerability

Open Bug Bounty ID: OBB-276489 Description| Value ---|--- Affected Website:| careers.staples.in Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

careerseurohq.staples.nl XSS vulnerability

Vulnerable URL: http://careerseurohq.staples.nl/nb/sokeresultater/?country=Amsterdam=2=1=all"--!"device=mobile Details: Description| Value ---|--- Patched:| No Latest check for patch:| 21.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculat...

busca.staples.com.br XSS vulnerability

Open Bug Bounty ID: OBB-124239 Description| Value ---|--- Affected Website:| busca.staples.com.br Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

staples.com XSS vulnerability

Vulnerable URL: http://www.staples.com/office/supplies/StaplesSearchPrinterByModelNumber?modelsearchkey=%22%3E%3Csvg%2Fonload%3Dalert%28%2Fxssposed.org%2F%29%3E=10001=10051=-1=12328=pmm1=SC43=null Details: Description| Value ---|--- Patched:| Yes, at 20.02.2016 Latest check for patch:| 20.02.2016...

1.2 Million Credit Cards Lost in Staples Data Breach

Retailer Staples has confirmed that point-of-sale malware had been used at 115 of its retail locations in the United States and criminals were able to access 1.16 million payment card numbers during a six-month-long intrusion. Staples said it removed the malware in September from the affected...

Staples Investigating Payment Data Card Breach

The office supply chain Staples Inc. is reportedly looking into a payment card breach, potentially making it the latest in a long line of retail establishments to suffer a compromise over the last year. “Staples is in the process of investigating a potential issue involving credit card data and h...

Accused UGA Hacker committed suicide

A former University of Georgia UGA student under investigation for allegedly hacking into the school's computerized personnel records system committed suicide last month. Stell attended classes at UGA between 2005 and 2007. The Data breach was carried out around two months back near 15th October...

Unfixed XSS vulnerability at www.staplescenter.com

Security researcher tenest, has submitted on 10/05/2010 a cross-site-scripting XSS vulnerability affecting www.staplescenter.com, which at the time of submission ranked 151116 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/06/2010. It is...