741 matches found
Zoo Management System 1.0 - SQL Injection
Zoo Management System 1.0 contains a SQL injection vulnerability via the username parameter on the login page. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of the affected site. id:...
ph0neutria
ph0neutria ph0neutria malware crawler v1.0.1 https://github.com/phage-nz/ph0neutria Note: This project is not actively maintained. About ph0neutria is a malware zoo builder that sources samples straight from the wild. Everything is stored in Viper for ease of access and manageability. This projec...
CVE-2022-33075
CVE-2022-33075 Exploit Title: Zoo Management System 1.0 - Stored Cross-Site-Scripting XSS Date: 05/26/2022 Exploit Author: Angelo Pio Amirante Vendor Homepage: https://www.sourcecodester.com/ Software Link: https://www.sourcecodester.com/php/15344/zoo-management-system-phpoop-free-source-code.htm...
CVE-2022-31897
CVE-2022-31897 Date: 06/22/2022 Exploit Author: Angelo Pio Amirante Vendor Homepage: https://www.sourcecodester.com/ Software Link: https://www.sourcecodester.com/php/15344/zoo-management-system-phpoop-free-source-code.html Version: 1.0 Tested on: Server: XAMPP on Windows 10 CVE: CVE-2022-31897...
CVE-2025-65881
CVE-2025-65881 The Project Zoo Management System v1.00 is vulnerable to Cross-site scripting XSS on /zms/classes/Login.php?f=login due to: 1. Invalid Content-type of JSON Responses on /zms/classes/Login.php?f=login 2. Unsanitized User Input in Responses Allowing unauthenticated attackers to injec...
CVE-2026-93348
Unsloth Zoo versions 2025.9.9 before 2026.8.14, as implemented in Unsloth 2025.9.9 through 2026.8.19, contains a code injection vulnerability in the model-loading compile path where the gettransformersmodeltype function in hfutils.py collects modeltype values from nested model configurations...
CVE-2026-93348
A flaw was found in Unsloth Zoo, which can lead to arbitrary code execution when loading a machine learning model. The vulnerability exists due to improper input sanitization of the model type parameter within configuration files during compilation. An attacker can exploit this issue by supplying...
CVE-2026-93348 Unsloth Zoo Code Injection via model_type in config.json
Unsloth Zoo versions 2025.9.9 before 2026.8.14, as implemented in Unsloth 2025.9.9 through 2026.8.19, contains a code injection vulnerability in the model-loading compile path where the gettransformersmodeltype function in hfutils.py collects modeltype values from nested model configurations...
CVE-2026-93348 Unsloth Zoo Code Injection via model_type in config.json
Unsloth Zoo versions 2025.9.9 before 2026.8.14, as implemented in Unsloth 2025.9.9 through 2026.8.19, contains a code injection vulnerability in the model-loading compile path where the gettransformersmodeltype function in hfutils.py collects modeltype values from nested model configurations...
CVE-2026-93348 Unsloth Zoo Code Injection via model_type in config.json
Unsloth Zoo versions 2025.9.9 before 2026.8.14, as implemented in Unsloth 2025.9.9 through 2026.8.19, contains a code injection vulnerability in the model-loading compile path where the gettransformersmodeltype function in hfutils.py collects modeltype values from nested model configurations...
EUVD-2026-88318
Unsloth Zoo versions 2025.9.9 before 2026.8.14, as implemented in Unsloth 2025.9.9 through 2026.8.19, contains a code injection vulnerability in the model-loading compile path where the gettransformersmodeltype function in hfutils.py collects modeltype values from nested model configurations...
CVE-2026-93348
The Unsloth Zoo library (versions 2025.9.9 before 2026.8.14), as implemented in Unsloth (2025.9.9 through 2026.8.19), is vulnerable to a code injection flaw in the model-loading compile path. The root cause is that the get_transformers_model_type() function in hf_utils.py collects model_type valu...
CVE-2026-93348: Improper Control of Generation of Code
Unsloth Zoo versions 2025.9.9 before 2026.8.14, as implemented in Unsloth 2025.9.9 through 2026.8.19, contains a code injection vulnerability in the model-loading compile path where the gettransformersmodeltype function in hfutils.py collects modeltype values from nested model configurations...
CVE-2026-77028
Joomla Extension - yootheme.com - Reflected XSS and open redirect via the submission redirect parameter in Zoo 4.1.66...
CVE-2026-76612
Joomla Extension - yootheme.com - Unauthenticated stored XSS via user-controlled fields in Zoo 4.1.66 - User supplied input in comments and user supplied field elements weren't escaped, leading to a stored XSS vector...
CVE-2026-76611
Joomla Extension - yootheme.com - Unauthenticated arbitrary directory listing via the Gallery element in Zoo 4.1.66...
EUVD-2026-63940
Joomla Extension - yootheme.com - Unauthenticated stored XSS via user-controlled fields in Zoo 4.1.66 - User supplied input in comments and user supplied field elements weren't escaped, leading to a stored XSS vector...
CVE-2026-76612 Joomla Extension - yootheme.com - Unauthenticated stored XSS via user-controlled fields in Zoo < 4.1.66
Joomla Extension - yootheme.com - Unauthenticated stored XSS via user-controlled fields in Zoo 4.1.66 - User supplied input in comments and user supplied field elements weren't escaped, leading to a stored XSS vector...
CVE-2026-76612
Zoo is a Joomla extension by yootheme.com . Versions prior to 4.1.66 are vulnerable to an unauthenticated stored XSS caused by user-supplied input in comments and user-supplied field elements not being properly escaped. An attacker can inject malicious scripts that execute in the context of other...
CVE-2026-76612 Joomla Extension - yootheme.com - Unauthenticated stored XSS via user-controlled fields in Zoo < 4.1.66
Joomla Extension - yootheme.com - Unauthenticated stored XSS via user-controlled fields in Zoo 4.1.66 - User supplied input in comments and user supplied field elements weren't escaped, leading to a stored XSS vector...