741 matches found
Zoo Management System 1.0 - SQL Injection
Zoo Management System 1.0 contains a SQL injection vulnerability via the username parameter on the login page. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of the affected site. id:...
ph0neutria
ph0neutria ph0neutria malware crawler v1.0.1 https://github.com/phage-nz/ph0neutria Note: This project is not actively maintained. About ph0neutria is a malware zoo builder that sources samples straight from the wild. Everything is stored in Viper for ease of access and manageability. This projec...
CVE-2022-33075
CVE-2022-33075 Título del Exploit: Zoo Management System 1.0 - Cross-Site-Scripting Almacenado XSS Fecha: 26/05/2022 Autor del Exploit: Angelo Pio Amirante Página del Proveedor: https://www.sourcecodester.com/ Enlace del Software:...
CVE-2022-31897
CVE-2022-31897 Fecha: 22/06/2022 Autor del exploit: Angelo Pio Amirante Página web del proveedor: https://www.sourcecodester.com/ Enlace del software: https://www.sourcecodester.com/php/15344/zoo-management-system-phpoop-free-source-code.html Versión: 1.0 Probado en: Servidor: XAMPP en Windows 10...
CVE-2025-65881
CVE-2025-65881 El proyecto Zoo Management System v1.00 es vulnerable a Cross-site scripting XSS en /zms/classes/Login.php?f=login debido a: 1. Content-type inválido de las respuestas JSON en /zms/classes/Login.php?f=login 2. Entrada de usuario sin sanear en las respuestas Lo que permite a atacant...
CVE-2026-93348
Unsloth Zoo versions 2025.9.9 before 2026.8.14, as implemented in Unsloth 2025.9.9 through 2026.8.19, contains a code injection vulnerability in the model-loading compile path where the gettransformersmodeltype function in hfutils.py collects modeltype values from nested model configurations...
CVE-2026-93348
A flaw was found in Unsloth Zoo, which can lead to arbitrary code execution when loading a machine learning model. The vulnerability exists due to improper input sanitization of the model type parameter within configuration files during compilation. An attacker can exploit this issue by supplying...
CVE-2026-93348 Unsloth Zoo Code Injection via model_type in config.json
Unsloth Zoo versions 2025.9.9 before 2026.8.14, as implemented in Unsloth 2025.9.9 through 2026.8.19, contains a code injection vulnerability in the model-loading compile path where the gettransformersmodeltype function in hfutils.py collects modeltype values from nested model configurations...
CVE-2026-93348 Unsloth Zoo Code Injection via model_type in config.json
Unsloth Zoo versions 2025.9.9 before 2026.8.14, as implemented in Unsloth 2025.9.9 through 2026.8.19, contains a code injection vulnerability in the model-loading compile path where the gettransformersmodeltype function in hfutils.py collects modeltype values from nested model configurations...
CVE-2026-93348 Unsloth Zoo Code Injection via model_type in config.json
Unsloth Zoo versions 2025.9.9 before 2026.8.14, as implemented in Unsloth 2025.9.9 through 2026.8.19, contains a code injection vulnerability in the model-loading compile path where the gettransformersmodeltype function in hfutils.py collects modeltype values from nested model configurations...
EUVD-2026-88318
Unsloth Zoo versions 2025.9.9 before 2026.8.14, as implemented in Unsloth 2025.9.9 through 2026.8.19, contains a code injection vulnerability in the model-loading compile path where the gettransformersmodeltype function in hfutils.py collects modeltype values from nested model configurations...
CVE-2026-93348
The Unsloth Zoo library (versions 2025.9.9 before 2026.8.14), as implemented in Unsloth (2025.9.9 through 2026.8.19), is vulnerable to a code injection flaw in the model-loading compile path. The root cause is that the get_transformers_model_type() function in hf_utils.py collects model_type valu...
CVE-2026-93348: Improper Control of Generation of Code
Unsloth Zoo versions 2025.9.9 before 2026.8.14, as implemented in Unsloth 2025.9.9 through 2026.8.19, contains a code injection vulnerability in the model-loading compile path where the gettransformersmodeltype function in hfutils.py collects modeltype values from nested model configurations...
CVE-2026-77028
Joomla Extension - yootheme.com - Reflected XSS and open redirect via the submission redirect parameter in Zoo 4.1.66...
CVE-2026-76611
Joomla Extension - yootheme.com - Unauthenticated arbitrary directory listing via the Gallery element in Zoo 4.1.66...
CVE-2026-76612
Joomla Extension - yootheme.com - Unauthenticated stored XSS via user-controlled fields in Zoo 4.1.66 - User supplied input in comments and user supplied field elements weren't escaped, leading to a stored XSS vector...
EUVD-2026-63940
Joomla Extension - yootheme.com - Unauthenticated stored XSS via user-controlled fields in Zoo 4.1.66 - User supplied input in comments and user supplied field elements weren't escaped, leading to a stored XSS vector...
CVE-2026-76612 Joomla Extension - yootheme.com - Unauthenticated stored XSS via user-controlled fields in Zoo < 4.1.66
Joomla Extension - yootheme.com - Unauthenticated stored XSS via user-controlled fields in Zoo 4.1.66 - User supplied input in comments and user supplied field elements weren't escaped, leading to a stored XSS vector...
CVE-2026-76612
Zoo is a Joomla extension by yootheme.com . Versions prior to 4.1.66 are vulnerable to an unauthenticated stored XSS caused by user-supplied input in comments and user-supplied field elements not being properly escaped. An attacker can inject malicious scripts that execute in the context of other...
CVE-2026-76612 Joomla Extension - yootheme.com - Unauthenticated stored XSS via user-controlled fields in Zoo < 4.1.66
Joomla Extension - yootheme.com - Unauthenticated stored XSS via user-controlled fields in Zoo 4.1.66 - User supplied input in comments and user supplied field elements weren't escaped, leading to a stored XSS vector...