Strong
Leekes has grown from a single store in 1897 into a dynamic family owned chain of home department stores selling furniture and accessories plus conservatories, orangeries, windows, doors, kitchens and bathrooms across South Wales, the South West and the Midlands. https://linktr.ee/leekesltd
Excellent
Dünyanın önde gelen perakende zinciri Carrefour Grubu’nun Türkiye’deki ilk marketini 1993 yılında İstanbul İçerenköy’de açmasıyla hiper market konseptini Türkiye’ye getiren ilk firma olmuştur. 1996 yılında Türkiye’nin en büyük topluluklarından Sabancı Holding ile Carrefour Grubu’nun gerçekleştirdiği ortaklık sonucunda CarrefourSA olarak yenilenmiş, ilk CarrefourSA marketini 1997 yılında Adana’da açmıştır. 2013 yılında yönetimin Sabancı Holding’e geçmesiyle oluşturulan yeni stratejiler doğrultusunda insan kaynakları, teknolojik altyapı, market konsepti gibi birçok alanda önemli yatırımlar hayata geçirerek sektörün öncü perakendecisi olma iddiasını sürdürmüştür. Sektörde bir ilk olarak 2017 yılında müşterilerine market içinde gastronomik bir deneyim yaşatmak amacıyla hayata geçirdiği “Lezzet Arası” restoranları ve 2020 yılında yerel esnaf ve girişimcileri destekleyerek CarrefourSA çatısı altında buluşturmak üzere başlattığı “Bayilik” sistemi ile “Yeni Nesil Market” vizyonu doğrultunda büyümeye devam etmektedir. Bugün 11 binden fazla çalışanı, “Hiper, Süper, Gurme, Mini” konseptlerindeki 900’den fazla marketi ve www.carrefoursa.com Online Marketinde müşterilerinin ihtiyaç ve beklentilerini en doğru şekilde karşılamak için çalışan CarrefourSA, 50 bin çeşit ürünü “Doğrusu CarrefourSA’da” anlayışıyla doğru kalitede ve doğru fiyata yılda 164 milyonu aşkın müşterisine ulaştırmaktadır.
Security & Compliance Standards Overview
No incidents recorded for Leekes in 2025.
No incidents recorded for CarrefourSA in 2025.
Leekes cyber incidents detection timeline including parent company and subsidiaries
CarrefourSA cyber incidents detection timeline including parent company and subsidiaries
Last 3 Security & Risk Events by Company
Formbricks is an open source qualtrics alternative. Prior to version 4.0.1, Formbricks is missing JWT signature verification. This vulnerability stems from a token validation routine that only decodes JWTs (jwt.decode) without verifying their signatures. Both the email verification token login path and the password reset server action use the same validator, which does not check the token’s signature, expiration, issuer, or audience. If an attacker learns the victim’s actual user.id, they can craft an arbitrary JWT with an alg: "none" header and use it to authenticate and reset the victim’s password. This issue has been patched in version 4.0.1.
Apollo Studio Embeddable Explorer & Embeddable Sandbox are website embeddable software solutions from Apollo GraphQL. Prior to Apollo Sandbox version 2.7.2 and Apollo Explorer version 3.7.3, a cross-site request forgery (CSRF) vulnerability was identified. The vulnerability arises from missing origin validation in the client-side code that handles window.postMessage events. A malicious website can send forged messages to the embedding page, causing the victim’s browser to execute arbitrary GraphQL queries or mutations against their GraphQL server while authenticated with the victim’s cookies. This issue has been patched in Apollo Sandbox version 2.7.2 and Apollo Explorer version 3.7.3.
A security vulnerability has been detected in Portabilis i-Educar up to 2.10. Affected by this vulnerability is an unknown functionality of the file /consulta-dispensas. Such manipulation leads to improper authorization. The attack may be launched remotely. The exploit has been disclosed publicly and may be used.
A weakness has been identified in Portabilis i-Educar up to 2.10. Affected is an unknown function of the file /module/Api/aluno. This manipulation of the argument aluno_id causes improper authorization. The attack may be initiated remotely. The exploit has been made available to the public and could be exploited.
A security flaw has been discovered in Tencent WeKnora 0.1.0. This impacts the function testEmbeddingModel of the file /api/v1/initialization/embedding/test. The manipulation of the argument baseUrl results in server-side request forgery. The attack can be launched remotely. The exploit has been released to the public and may be exploited. It is advisable to upgrade the affected component. The vendor responds: "We have confirmed that the issue mentioned in the report does not exist in the latest releases".
