privateloader

VEK - Vulnerability Exploit Kit DEMO Disclosure

Feb 1st, 2015
1,050
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 12.67 KB | None | 0 0
  1. The VEK - Vulnerability Exploit Kit DEMO edition contains the following exploits:
  2.  
  3. WordPress <= 2.0.2 'cache' shell injection exploit
  4. Webfroot Shoutbox < 2.32 on apache exploit
  5. IE-Object longtype dynamic call oferflow - exploit on IE 5.x - 6.x
  6. Mandrake 8.2 /usr/mail local exploit
  7. phpBB password disclosure vuln
  8. Solaris Remote command executiong via sadmind
  9. universal eZ v3.3 < v3.5 remote exploit
  10. phpBB v<=2.06 search_id sql injection exploit
  11. Cisco 677/678 Telnet Buffer Overflow Vulnerability
  12. Cisco IOS Router Denial of Service Vulnerability
  13. Cisco IOS HTTP Auth Vulnerability
  14. Cisco IOS HTTP Configuration Arbitrary Administrative Access Vulnerability
  15. Cisco Catalyst SSH Protocol Mismatch Denial of Service Vulnerability
  16. Cisco 675 Web Administration Denial of Service Vulnerability
  17. Cisco Catalyst 3500 XL Remote Arbitrary Command Vulnerability
  18. Cisco IOS Software HTTP Request Denial of Service Vulnerability
  19. Cisco 514 UDP Flood Denial of Service Vulnerability
  20. CiscoSecure ACS for Windows NT Server Denial of Service Vulnerability
  21. monit <= 4.1 remote root exploit
  22. Exploit for Mailing List & News Version 1.7 Exploit.
  23. Exploit for IIS Unicode vulnerable servers
  24. Redhat 6.1 man exploit
  25. Turbolinux 6.0 exploit
  26. Remote sploit for Netscape Enterprise Server 4.0/sparc/SunOS 5.7
  27. remote exploit for Borland Interbase 7.1 SP 2 and lower
  28. exploit for apache ap_get_mime_headers_core() vuln
  29. blackJumboDog Exploit
  30. remote root exploit for AppleFileServer
  31. BadBlue v2.52 Web Server - Multiple Connections DoS
  32. IPSWITCH WhatsUp Gold ver8.03 Remote Buffer Overflow Exploit
  33. Exploit for MS04-030
  34. Exploit for the IPSwitch IMail DELETE buffer overflow
  35. TWiki vulnerability Remote code execution
  36. phpBB <= 2.0.10 remote commands exec exploit
  37. Invision Power Board v2.0.0 - 2.0.2 sql injection exploit
  38. phpBB <= 2.0.10 Web Worm
  39. HTGET <= 0.9.x local lame r00t exploit
  40. Advanced Web Statistics 6.0 - 6.2 Remote command execution exploit
  41. Exploit for the SiteMan vulnerability
  42. Savant Web Server 3.1 Remote Buffer Overflow Exploit
  43. apache - squ1rt exploit
  44. Freeciv Server <= 2.0.0beta8 DoS exploit (windows&linux releases)
  45. phpBB <=2.0.12 session autologin exploit
  46. PostScript Utilities Vulnerability
  47. MCPWS Personal - Webserver <= 1.3.21 DoS Exploit
  48. Ocean FTP Server Ver 1.00 Denial Of Service POC
  49. MailEnable (Enterprise <= 1.04)-(Professional <= 1.54 SMTPd remote DOS exploit
  50. Serendipity 0.8beta4 exit.php SQL Injection exploit
  51. MailEnable (Enterprise & Professional) HTTPS remote BoF exploit
  52. E-Cart 2004 v1.1 Remote Command Execution Vulnerability
  53. Setuid ARPUS/ce exploit
  54. ZPanel Ver. 2.5 sql injection exploit with one char bruteforce
  55. SQL Injection Exploit for WordPress <= 1.5.1.1
  56. WebHints Software Remote Command Execution Vulnerability
  57. ViRobot 2.0 remote cookie exploit
  58. Remote Command Execution Vulnerability In Web_store.cgi
  59. MercuryBoard <=1.1.4, MySQL => 4.1 sql injection exploit
  60. WordPress <= 1.5.1.1 sql injection "add new admin" exploit
  61. Mambo <= 4.5.2.1, MySQL => 4.1 sql injection exploit
  62. phpBB Registration And Search DoS Flooder
  63. Exploit For ASPNuke ASP Portal
  64. SQL Injection Exploit for ASPNuke <= 0.80
  65. phpBB 2.0.15 arbitrary command execution eXploit
  66. Xoops <= 2.0.11 xmlrpc.php sql injection exploit
  67. MySQL Eventum <= v1.5.5 SQL Injection
  68. PBLang <= 4.65 remote commands exec exploit
  69. wzdftpd remote exploit
  70. simple exploit phpMyAdmin 2.6.4-pl1
  71. Solaris 10 DtPrintinfo/Session Exploit (x86)
  72. VERITAS NetBackup Format Strings OSX/ppc Remote Exploit
  73. PHPNuke 7.8 SQL Injection / remote commands execution exploit
  74. Subdreamer 2.2.1 command exec exploit
  75. Atutor 1.5.1 pl2 SQL injection
  76. Unclassified NewsBoard 1.5.3 patch level 3 injection
  77. EkinBoard 1.0.3 config.php SQL Injection through cookie
  78. Mambo <= 4.5.2 Globals overwrite / remote commands execution
  79. eFiction <= 2.0 fake GIF Shell Upload
  80. Guppy <=4.5.9 _SERVER[REMOTE_ADDR] overwrite / remote commands
  81. Xaraya <=1.0.0 RC4 D.O.S
  82. Zen-Cart <= 1.2.6d blind SQL injection / remote commands execution
  83. trifinite.group Bluetooth sobexsrv remote syslog() exploit
  84. SimpleBBS <= v1.1 remote commands execution
  85. Sugar Suite Open Source <= 4.0 beta remote code execution
  86. Website Baker 2.6.0 Login Bypass / remote commands execution
  87. phpCOIN 1.2.2 phpcoinsessid blind SQL injection / remote code execution
  88. Limbo <= 1.0.4.2 _SERVER[REMOTE_ADDR] overwrite/ remote cmmnds xctn
  89. PHPGedView <= 3.3.7 remote commands execution
  90. Dev <=1.5 'cat' SQL injection / admin MD5 password hash disclosure
  91. phpBB <= 2.0.17 remote command execution exploit
  92. "WinProxy 6.0 R1c" Remote Stack/SEH Overflow Exploit
  93. "WinProxy 6.0 R1c" Remote DoS Exploit
  94. Remote "estara softphone" exploit
  95. Sami FTP Server v2.0.1 Remote notepad.exe execution
  96. Exchangepop3 v5.0 remote exploit
  97. EGS Enterprise Groupware System <=1.0 rc4 remote commands execution exploit
  98. FlySpray 0.9.7 remote commands execution exploit
  99. AWStats < 6.4 command execution exploit
  100. Zorum forum version 3.5 sql injection exploit
  101. Gravity Board X v1.1 remote code execution exploit
  102. Windows Media Player Profiteer
  103. revilloC mail server PoC exploit ( for xp sp1)
  104. Gallery <=2.0.3 Exploit
  105. D2KBLOG SQL injection
  106. php iCalendar <=2.21 remote commands
  107. Nodez 4.6.1.1 Mercury multiple vulnerabilities
  108. gCards <= 1.45 multiple vulnerabilities
  109. XHP CMS <= 0.5 remote cmmnds xctn
  110. WebAlbum <= 2.02pl remote cmmnds xctn
  111. PHPCollab v2.x / NetOffice v2.x sendpassword.php SQL Injection
  112. Plogger <= Beta 2.1 SQL injection / administrative credentials disclosure
  113. RealPlayer: Buffer overflow vulnerability
  114. Claroline <= 1.7.4 remote cmmnds xctn
  115. ReloadCMS <= 1.2.5 stable Cross site scripting / remote command execution
  116. VWar <= 1.5.0 R12 Remote File Inclusion Exploit
  117. PHPMyChat <= 0.14.5 remote cmmnds xctn
  118. ADODB tmssql.php Denial of service
  119. PhpOpenChat 3.0.x ADODB Server.php SQL injection
  120. PHPList <= 2.10.2 GLOBALS[] remote cmmnds xctn
  121. Simplog <= 0.9.2 remote cmmnds xctn
  122. PHP121 Instant Messenger <= 1.4 remote cmmnds xctn
  123. sysinfo.cgi 1.21 remote cmmnds xctn
  124. PHP Album <= 0.3.2.3 remote cmmnds xctn
  125. PCPIN Chat <= 5.0.4 remote cmmnds xctn
  126. PHPSurveyor <= 0.995 remote cmmnds xctn
  127. Invision Power Board 2.* commands execution exploit
  128. X7 Chat <=2.0 arbitrary local inclusion
  129. HiveMail <= 1.3 remote command execution exploit
  130. TinyFTPD <= 1.4 USER command D.O.S
  131. Unclassified NewsBoard <= 1.6.1 exploit
  132. PhpBB <= v2.0.20 remote commands execution
  133. Sugar Suite Open Source <= 4.2 arbitrary remote inclusion exploit
  134. DeluxeBB <= v1.06 attachment mod_mime exploit
  135. XOOPS <= 2.0.13.2 exploit
  136. Nucleus <= 3.22 arbitrary remote inclusion exploit
  137. Drupal <= 4.7 attachment mod_mime exploit
  138. pppBlog <= 0.3.8 system disclosure exploit
  139. Pixelpost <= 1-5rc1-2 privilege escalation exploit
  140. DotClear <= 1.2.4 arbitrary remote inclusion
  141. LifeType <= 1.0.4_r3270 SQL injection
  142. QBik Wingate version 6.1.1.1077 remote exploit for Win2k SP4 (german)
  143. blur6ex <= 0.3.462 'ID' blind SQL injection / admin credentials disclosure
  144. bitweaver <= v1.3 'tmpImagePath' attachment mod_mime exploit
  145. Mambo <= 4.6rc1 'Weblinks' blind SQL injection / admin credentials
  146. DataLife Engine sql injection exploit
  147. Mambo <= 4.6rc1 'Weblinks' blind SQL injection / admin credentials
  148. Jaws <= 0.6.2 SQL injection / admin credentials disclosure
  149. Microsoft Office Excel 2003 Hlink Stack/SEH Overflow Exploit
  150. BLOG:CMS <= 4.0.0k sql injection/admin credentials disclosure exploit
  151. Pivot <= 1.30 RC2 privileges escalation / remote commands execution exploit
  152. PAPOO <= 3_RC3 SQL injection / admin credentials disclosure
  153. PhpBB 3 memberlist.php/'ip' argument SQL injection / admin credentials disclosure
  154. PHORUM 5 arbitrary local inclusion exploit
  155. Invision Power Board v2.1 <= 2.1.6 sql injection exploit
  156. MyBB <= 1.1.5 SQL injection / create new admin exploit
  157. ToendaCMS <= 1.0.0 remote commands execution
  158. LoudBlog <= 0.5 'id' SQL injection / admin credentials disclosure
  159. X7 Chat <=2.0.4 'old_prefix' blind SQL injection / privilege escalation exploit
  160. Etomite CMS <= 0.6.1 (all patches applied) 'username' SQL injection / admin credentials disclosure
  161. Etomite CMS <= 0.6.1 'rfiles.php' remote command execution
  162. ATutor <= 1.5.3.1 'links' blind SQL injection / admin credentials disclosure
  163. XMB <= 1.9.6 'u2uid' SQL injection / admin credentials disclosure
  164. SendCard <= 3.4.0 unauthorized administrative access / remote commands
  165. MyBloggie <= 2.1.4 trackback.php multiple SQL injections vulnerability
  166. XMB <= 1.9.6 Final basename() 'langfilenew' arbitrary local inclusion / remote commands xctn
  167. CubeCart <= 3.0.11 blind SQL injection / admin credentials disclosure exploit
  168. MercuryBoard <= 1.1.4 SQL injection / privilege escalation exploit
  169. phpGroupWare <= 0.9.16.010 Remote Code Execution Exploit
  170. TikiWiki <= 1.9 Sirius remote commands execution exploit
  171. PmWiki <= 2.1.19 Zend_Hash_Del_Key_Or_Index/remote commands execution exploit
  172. pHNews <= alpha 1 (templates_dir) Remote Code Execution Exploit
  173. PHP Proxima <= v.6 Remote Code Execution Exploit
  174. PhpCommander <= 3.0 Remote Code Execution Exploit
  175. DokuWiki <= 2006-03-09b remote commands execution xploit
  176. RaidenHTTPD/1.1.49 remote commands execution exploit
  177. CCleague Pro Sports CMS <= 1.0.1RC1 (Cookie) Remote Code Execution Exploit
  178. Limbo <= 1.0.4.2L remote commands execution exploit
  179. Exponent CMS 0.96.3 stable arbitrary local inclusion / remote commands xctn exploit
  180. PhpBlueDragon CMS <= 2.9 (XSS/SQL) Remote Code Execution Exploit
  181. Microsoft Internet Explorer VML Remote Buffer Overflow (Windows XP SP0-SP1 + Windows 2000 SP4)
  182. Microsoft Internet Explorer VML Remote Buffer Overflow (Windows XP SP2)
  183. KGB 1.8+ <= 1.8 full Remote Code Execution Exploit
  184. Flatnuke 2.5.8 arbitrary local inclusion/delete all users exploit
  185. WSN Forum <= 1.3.4 Remote File Include Exploit / Code Execution Vulnerability
  186. PHP-Post <= 1.01 Remote Code Execution Exploit
  187. YapBB <= 1.2 Beta2 Remote File Include Exploit
  188. PH Pexplorer <= 0.24 Remote Code Execution Exploit
  189. JaxUltraBB <= 2.0 Defaced Exploit
  190. Ascended Guestbook <= 1.0.0 Remote File Include Exploit
  191. JaxUltraBB v2.0 Topic Reply Command Execution Exploit
  192. Discuz! 5.0.0 GBK SQL injection / admin credentials disclosure exploit
  193. Imageview <= 5 Remote Code Execution Exploit
  194. miniBB <= 2.0.2 Remote File Include Exploit
  195. Light Blog Multiple Vulnerabilities Exploit
  196. Novell eDirectory 8.8 NDS Server Remote Stack Overflow Exploit
  197. Nitrotech <= 0.0.3a Remote Code Execution Exploit
  198. T.G.S. CMS <= 0.1.7 Remote SQL Injection Exploit
  199. Innovate Portal <= 2.0 Remote Code Execution Exploit
  200. Woltlab Burning Board Lite 1.0.2 sql injection exploit
  201. Discuz! 4.x SQL injection / admin credentials disclosure exploit
  202. Kubix <=0.7 Multiple Vulnerabilities Exploit
  203. PHPUpdate <= 2.7 extract() auth bypass / shell inject
  204. Open Newsletter <= 2.* Vulnerabilities
  205. PHP-Update <= 2.7 str_replace() sql injection / privilege escalation
  206. Cacti <= 0.8.6i popen() injection
  207. Cacti 0.8.6i sql injection create new admin exploit
  208. Remote exploit for buffer overflow vulnerability in CA BrightStor Arcserve
  209. Wordpress <= 2.0.6 wp-trackback.php sql injection admin hash disclosure exploit
  210. sNews <= 1.5.30 unauthorized access / reset admin pass / cmd exec exploit
  211. ThWboard <=3.0 beta 2.84-php5 board[styleid] sql injection / cmd exec exploit
  212. Woltlab Burning Board Lite <= 1.0.2
  213. Xero Portal v1.2 Local File Include Vulnerablity
  214. Golem Gaming Portal Remote File Include Exploit
  215. Guppy <= 4.5.16 remote commands execution exploit
  216. Remote Oracle dbms_export_extension exploit
  217. Advanced Poll 2.0.0 >= 2.0.5-dev textfile admin session gen
  218. Xaran Cms <= V2.0 Remote SQL Injection Exploit
  219. Mail Enable Professional/Enterprise <=v2.35 (win32)
  220. Exploit for PHP-nuke <=8.0 Final
  221. WebSPELL <= v4.01.02 (topic) Remote SQL Injection
  222. Exploit Oracle Database 10g Enterprise Edition Release 10.1.0.3.0
  223. vBulletin <= 3.6.4 sql injection / privilege escalation by session hijacking exploit
  224. News-Letterman 1.1 (eintrag.php) Remote File Include Exploit
  225. AJ Forum 1.0 (topic_title.php) Remote BLIND SQL Injection Exploit
  226. InoutMailingListManager <= 3.1 Command Execution Exploit + Login Retrieve + Advisory
  227. mxBB Module MX Faq & Rules <= 2.0.0 (faq.php) Remote File Include Exploit
  228. IE 6 / DB Software Laboratory VImpX ActiveX (VImpX.ocx v. 4.7.3.0) remote buffer overflow exploit
  229. AlstraSoft E-Friends <= 4.21 Admin Session Retrieve Exploit
  230. AlstraSoft Template Seller Pro <= 3.25 Admin Password Change Exploit
  231. IE 6 / Pegasus ImagN' ActiveX Control (IMW32O40.OCX V4.00.041) remote buffer overflow exploit
  232. gCards <= 1.46 SQL Injection/Remote Code Execution Exploit
  233. Inout Search Engine (all version) Remote Code Execution Exploit
  234. ................
  235. And include more outdated exploits
  236.  
  237. Download: (Update - 18/02/2016)
  238. http://nitroflare.com/view/52E32472DDF19E0/VEK_-_Vulnerability_Exploit_Kit_DEMO.exe
Advertisement
Add Comment
Please, Sign In to add comment