832 matches found
CVE-2022-31897
CVE-2022-31897 Date: 06/22/2022 Exploit Author: Angelo Pio Amirante Vendor Homepage: https://www.sourcecodester.com/ Software Link: https://www.sourcecodester.com/php/15344/zoo-management-system-phpoop-free-source-code.html Version: 1.0 Tested on: Server: XAMPP on Windows 10 CVE: CVE-2022-31897...
CVE-2022-33075
CVE-2022-33075 Exploit Title: Zoo Management System 1.0 - Stored Cross-Site-Scripting XSS Date: 05/26/2022 Exploit Author: Angelo Pio Amirante Vendor Homepage: https://www.sourcecodester.com/ Software Link: https://www.sourcecodester.com/php/15344/zoo-management-system-phpoop-free-source-code.htm...
ph0neutria
ph0neutria ph0neutria malware crawler v1.0.1 https://github.com/phage-nz/ph0neutria Note: This project is not actively maintained. About ph0neutria is a malware zoo builder that sources samples straight from the wild. Everything is stored in Viper for ease of access and manageability. This projec...
Zoo Management System 1.0 - SQL Injection
Zoo Management System 1.0 contains a SQL injection vulnerability via the username parameter on the login page. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of the affected site. id:...
CVE-2025-65881
CVE-2025-65881 The Project Zoo Management System v1.00 is vulnerable to Cross-site scripting XSS on /zms/classes/Login.php?f=login due to: 1. Invalid Content-type of JSON Responses on /zms/classes/Login.php?f=login 2. Unsanitized User Input in Responses Allowing unauthenticated attackers to injec...
CVE-2026-93348
Unsloth Zoo versions 2025.9.9 before 2026.8.14, as implemented in Unsloth 2025.9.9 through 2026.8.19, contains a code injection vulnerability in the model-loading compile path where the gettransformersmodeltype function in hfutils.py collects modeltype values from nested model configurations...
CVE-2026-93348
A flaw was found in Unsloth Zoo, which can lead to arbitrary code execution when loading a machine learning model. The vulnerability exists due to improper input sanitization of the model type parameter within configuration files during compilation. An attacker can exploit this issue by supplying...
CVE-2026-93348 Unsloth Zoo Code Injection via model_type in config.json
Unsloth Zoo versions 2025.9.9 before 2026.8.14, as implemented in Unsloth 2025.9.9 through 2026.8.19, contains a code injection vulnerability in the model-loading compile path where the gettransformersmodeltype function in hfutils.py collects modeltype values from nested model configurations...
CVE-2026-93348
The Unsloth Zoo library (versions 2025.9.9 before 2026.8.14), as implemented in Unsloth (2025.9.9 through 2026.8.19), is vulnerable to a code injection flaw in the model-loading compile path. The root cause is that the get_transformers_model_type() function in hf_utils.py collects model_type valu...
EUVD-2026-88318
Unsloth Zoo versions 2025.9.9 before 2026.8.14, as implemented in Unsloth 2025.9.9 through 2026.8.19, contains a code injection vulnerability in the model-loading compile path where the gettransformersmodeltype function in hfutils.py collects modeltype values from nested model configurations...
CVE-2026-93348 Unsloth Zoo Code Injection via model_type in config.json
Unsloth Zoo versions 2025.9.9 before 2026.8.14, as implemented in Unsloth 2025.9.9 through 2026.8.19, contains a code injection vulnerability in the model-loading compile path where the gettransformersmodeltype function in hfutils.py collects modeltype values from nested model configurations...
CVE-2026-93348 Unsloth Zoo Code Injection via model_type in config.json
Unsloth Zoo versions 2025.9.9 before 2026.8.14, as implemented in Unsloth 2025.9.9 through 2026.8.19, contains a code injection vulnerability in the model-loading compile path where the gettransformersmodeltype function in hfutils.py collects modeltype values from nested model configurations...
lmurg (>=1.0.5, <=1.0.6), ml-trainer-sdk (>=0.2.0, <=0.4.1.10) +3 more potentially affected by CVE-2026-93348 via unsloth-zoo (>=2025.9.12, <=2026.3.2)
unsloth-zoo PYPI version =2025.9.12, =1.0.5, =0.2.0, =0.0.1, =2025.2.8, =1.0.1, =1.0.2 Source cves: CVE-2026-93348 Source advisory: MEND:CVE-2026-93348...
CVE-2026-93348
Unsloth Zoo versions 2025.9.9 before 2026.8.14, as implemented in Unsloth 2025.9.9 through 2026.8.19, contains a code injection vulnerability in the model-loading compile path where the gettransformersmodeltype function in hfutils.py collects modeltype values from nested model configurations...
CVE-2026-93348: Improper Control of Generation of Code
Unsloth Zoo versions 2025.9.9 before 2026.8.14, as implemented in Unsloth 2025.9.9 through 2026.8.19, contains a code injection vulnerability in the model-loading compile path where the gettransformersmodeltype function in hfutils.py collects modeltype values from nested model configurations...
PT-2026-99916
Name of the Vulnerable Software and Affected Versions Unsloth Zoo versions 2025.9.9 through 2026.8.13 Unsloth versions 2025.9.9 through 2026.8.19 Description A code injection issue exists in the model-loading compile path. The get transformers model type function in hf utils.py collects model typ...
dataoceanai-dolphin (>=20250317.0.0, <=20250716.0.0), espnet-model-zoo (>=0.0.0a1, <=0.1.1a2) +3 more potentially affected by CVE-2026-90777 via espnet (>=202301.0.0, <=202511.0.0)
espnet PYPI version =202301.0.0, =20250317.0.0, =0.0.0a1, =0.0.1, =6.0.1, =6.0.2 Source cves: CVE-2026-90777 Source advisory: MEND:CVE-2026-90777...
unsloth (>=2025.11.2, <=2025.11.6), unsloth-zoo (>=2025.11.3, <=2025.12.1) potentially affected by CVE-2026-9856 via transformers (4.57.2)
transformers PYPI version 4.57.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - unsloth =2025.11.2, =2025.11.3, =2025.12.1 Source cves: CVE-2026-9856 Source advisory: OSV:PYSEC-2026-3929...
bunnieddpg (0.1.0), pdftotree (>=0.3.0, <=0.4.1) +2 more potentially affected by CVE-2026-12570 via keras (2.0.8)
keras PYPI version 2.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - bunnieddpg 0.1.0 - pdftotree =0.3.0, =0.1.1, =0.3.4 - yoctol-keras-layer-zoo 0.7.0 Source cves: CVE-2026-12570 Source advisory: OSV:PYSEC-2026-3856...