CVE-2026-89307

The "Firma Circolare" feature in the "Design Scuole Italia" WordPress theme allows an authenticated attacker to inject arbitrary HTML via the sign parameter, enabling forced redirection of visiting users to an attacker-controlled URL Stored HTML Injection / Open Redirect...

CVE-2026-87793

The "Design Scuole Italia" WordPress theme is affected by a Reflected XSS vulnerability in the filters-scheda-didattica.php file, allowing an unauthenticated attacker to execute arbitrary JavaScript in a victim's browser via a crafted URL containing a malicious archive parameter...

CVE-2026-87792

The "Design Scuole Italia" WordPress theme is affected by multiple Authorization Bypass vulnerabilities in the dsipdfgenerator and dsicsvgenerator functions, allowing an unauthenticated attacker to access restricted "Circolare" content and registered users' data. An unauthenticated RSS feed...

CVE-2026-87791

A path traversal vulnerability exists in the reservedfilecheck function of the functions.php file in the WordPress Design Scuole Italia theme. The vulnerability allows an unauthenticated attacker to download arbitrary files accessible by the web server process...

EUVD-2026-78668

The "Firma Circolare" feature in the "Design Scuole Italia" WordPress theme allows an authenticated attacker to inject arbitrary HTML via the sign parameter, enabling forced redirection of visiting users to an attacker-controlled URL Stored HTML Injection / Open Redirect...

CVE-2026-89307

CVE-2026-89307 affects the Design Scuole Italia WordPress theme (versions 1.0–2.17.3 ). The "Firma Circolare" feature allows an authenticated attacker to inject arbitrary HTML via the sign parameter, enabling a stored HTML injection that forces visiting users to redirect to an attacker-controlled...

CVE-2026-87793

The "Design Scuole Italia" WordPress theme (versions 1.0–2.18.2 ) contains a Reflected Cross-Site Scripting (XSS) vulnerability in the filters-scheda-didattica.php file. An unauthenticated attacker can execute arbitrary JavaScript in a victim's browser by supplying a malicious value in the archiv...

EUVD-2026-78666

The "Design Scuole Italia" WordPress theme is affected by a Reflected XSS vulnerability in the filters-scheda-didattica.php file, allowing an unauthenticated attacker to execute arbitrary JavaScript in a victim's browser via a crafted URL containing a malicious archive parameter...

CVE-2026-87792

The "Design Scuole Italia" WordPress theme (versions 1.0–2.17.3 ) is affected by multiple Authorization Bypass vulnerabilities in the dsi_pdf_generator and dsi_csv_generator functions. An unauthenticated attacker can access restricted "Circolare" content and registered users' data; an unauthentic...

EUVD-2026-78665

The "Design Scuole Italia" WordPress theme is affected by multiple Authorization Bypass vulnerabilities in the dsipdfgenerator and dsicsvgenerator functions, allowing an unauthenticated attacker to access restricted "Circolare" content and registered users' data. An unauthenticated RSS feed...

EUVD-2026-78781

A path traversal vulnerability exists in the reservedfilecheck function of the functions.php file in the WordPress Design Scuole Italia theme. The vulnerability allows an unauthenticated attacker to download arbitrary files accessible by the web server process...

CVE-2026-87791

A path traversal vulnerability in the reserved_file_check function of functions.php in the WordPress Design SCUOLE Italia theme (versions 2.6.0–2.18.1 ) allows an unauthenticated attacker to download arbitrary files accessible by the web server process. The CVSS 4.0 base score is 8.7 (HIGH) , ref...

Itel DAB Encoder 安全漏洞

Itel DAB Encoder is a device for broadcasting systems from Itel Italia. A security vulnerability exists in Itel DAB Encoder that stems from improper JWT authentication, which could lead to authentication bypass...

EUVD-2008-7124

Malware in sbrugna...

EUVD-2019-11513

Malware in sbrugna...

EUVD-2008-1861

Malware in sbrugna...

EUVD-2008-1862

Malware in sbrugna...

EUVD-2019-11514

Malware in sbrugna...

EUVD-2019-17225

Malware in sbrugna...

CVE-2024-11758

The WP SPID Italia plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode in all versions up to, and including, 2.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, wit...