Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- The VEK - Vulnerability Exploit Kit DEMO edition contains the following exploits:
- WordPress <= 2.0.2 'cache' shell injection exploit
- Webfroot Shoutbox < 2.32 on apache exploit
- IE-Object longtype dynamic call oferflow - exploit on IE 5.x - 6.x
- Mandrake 8.2 /usr/mail local exploit
- phpBB password disclosure vuln
- Solaris Remote command executiong via sadmind
- universal eZ v3.3 < v3.5 remote exploit
- phpBB v<=2.06 search_id sql injection exploit
- Cisco 677/678 Telnet Buffer Overflow Vulnerability
- Cisco IOS Router Denial of Service Vulnerability
- Cisco IOS HTTP Auth Vulnerability
- Cisco IOS HTTP Configuration Arbitrary Administrative Access Vulnerability
- Cisco Catalyst SSH Protocol Mismatch Denial of Service Vulnerability
- Cisco 675 Web Administration Denial of Service Vulnerability
- Cisco Catalyst 3500 XL Remote Arbitrary Command Vulnerability
- Cisco IOS Software HTTP Request Denial of Service Vulnerability
- Cisco 514 UDP Flood Denial of Service Vulnerability
- CiscoSecure ACS for Windows NT Server Denial of Service Vulnerability
- monit <= 4.1 remote root exploit
- Exploit for Mailing List & News Version 1.7 Exploit.
- Exploit for IIS Unicode vulnerable servers
- Redhat 6.1 man exploit
- Turbolinux 6.0 exploit
- Remote sploit for Netscape Enterprise Server 4.0/sparc/SunOS 5.7
- remote exploit for Borland Interbase 7.1 SP 2 and lower
- exploit for apache ap_get_mime_headers_core() vuln
- blackJumboDog Exploit
- remote root exploit for AppleFileServer
- BadBlue v2.52 Web Server - Multiple Connections DoS
- IPSWITCH WhatsUp Gold ver8.03 Remote Buffer Overflow Exploit
- Exploit for MS04-030
- Exploit for the IPSwitch IMail DELETE buffer overflow
- TWiki vulnerability Remote code execution
- phpBB <= 2.0.10 remote commands exec exploit
- Invision Power Board v2.0.0 - 2.0.2 sql injection exploit
- phpBB <= 2.0.10 Web Worm
- HTGET <= 0.9.x local lame r00t exploit
- Advanced Web Statistics 6.0 - 6.2 Remote command execution exploit
- Exploit for the SiteMan vulnerability
- Savant Web Server 3.1 Remote Buffer Overflow Exploit
- apache - squ1rt exploit
- Freeciv Server <= 2.0.0beta8 DoS exploit (windows&linux releases)
- phpBB <=2.0.12 session autologin exploit
- PostScript Utilities Vulnerability
- MCPWS Personal - Webserver <= 1.3.21 DoS Exploit
- Ocean FTP Server Ver 1.00 Denial Of Service POC
- MailEnable (Enterprise <= 1.04)-(Professional <= 1.54 SMTPd remote DOS exploit
- Serendipity 0.8beta4 exit.php SQL Injection exploit
- MailEnable (Enterprise & Professional) HTTPS remote BoF exploit
- E-Cart 2004 v1.1 Remote Command Execution Vulnerability
- Setuid ARPUS/ce exploit
- ZPanel Ver. 2.5 sql injection exploit with one char bruteforce
- SQL Injection Exploit for WordPress <= 1.5.1.1
- WebHints Software Remote Command Execution Vulnerability
- ViRobot 2.0 remote cookie exploit
- Remote Command Execution Vulnerability In Web_store.cgi
- MercuryBoard <=1.1.4, MySQL => 4.1 sql injection exploit
- WordPress <= 1.5.1.1 sql injection "add new admin" exploit
- Mambo <= 4.5.2.1, MySQL => 4.1 sql injection exploit
- phpBB Registration And Search DoS Flooder
- Exploit For ASPNuke ASP Portal
- SQL Injection Exploit for ASPNuke <= 0.80
- phpBB 2.0.15 arbitrary command execution eXploit
- Xoops <= 2.0.11 xmlrpc.php sql injection exploit
- MySQL Eventum <= v1.5.5 SQL Injection
- PBLang <= 4.65 remote commands exec exploit
- wzdftpd remote exploit
- simple exploit phpMyAdmin 2.6.4-pl1
- Solaris 10 DtPrintinfo/Session Exploit (x86)
- VERITAS NetBackup Format Strings OSX/ppc Remote Exploit
- PHPNuke 7.8 SQL Injection / remote commands execution exploit
- Subdreamer 2.2.1 command exec exploit
- Atutor 1.5.1 pl2 SQL injection
- Unclassified NewsBoard 1.5.3 patch level 3 injection
- EkinBoard 1.0.3 config.php SQL Injection through cookie
- Mambo <= 4.5.2 Globals overwrite / remote commands execution
- eFiction <= 2.0 fake GIF Shell Upload
- Guppy <=4.5.9 _SERVER[REMOTE_ADDR] overwrite / remote commands
- Xaraya <=1.0.0 RC4 D.O.S
- Zen-Cart <= 1.2.6d blind SQL injection / remote commands execution
- trifinite.group Bluetooth sobexsrv remote syslog() exploit
- SimpleBBS <= v1.1 remote commands execution
- Sugar Suite Open Source <= 4.0 beta remote code execution
- Website Baker 2.6.0 Login Bypass / remote commands execution
- phpCOIN 1.2.2 phpcoinsessid blind SQL injection / remote code execution
- Limbo <= 1.0.4.2 _SERVER[REMOTE_ADDR] overwrite/ remote cmmnds xctn
- PHPGedView <= 3.3.7 remote commands execution
- Dev <=1.5 'cat' SQL injection / admin MD5 password hash disclosure
- phpBB <= 2.0.17 remote command execution exploit
- "WinProxy 6.0 R1c" Remote Stack/SEH Overflow Exploit
- "WinProxy 6.0 R1c" Remote DoS Exploit
- Remote "estara softphone" exploit
- Sami FTP Server v2.0.1 Remote notepad.exe execution
- Exchangepop3 v5.0 remote exploit
- EGS Enterprise Groupware System <=1.0 rc4 remote commands execution exploit
- FlySpray 0.9.7 remote commands execution exploit
- AWStats < 6.4 command execution exploit
- Zorum forum version 3.5 sql injection exploit
- Gravity Board X v1.1 remote code execution exploit
- Windows Media Player Profiteer
- revilloC mail server PoC exploit ( for xp sp1)
- Gallery <=2.0.3 Exploit
- D2KBLOG SQL injection
- php iCalendar <=2.21 remote commands
- Nodez 4.6.1.1 Mercury multiple vulnerabilities
- gCards <= 1.45 multiple vulnerabilities
- XHP CMS <= 0.5 remote cmmnds xctn
- WebAlbum <= 2.02pl remote cmmnds xctn
- PHPCollab v2.x / NetOffice v2.x sendpassword.php SQL Injection
- Plogger <= Beta 2.1 SQL injection / administrative credentials disclosure
- RealPlayer: Buffer overflow vulnerability
- Claroline <= 1.7.4 remote cmmnds xctn
- ReloadCMS <= 1.2.5 stable Cross site scripting / remote command execution
- VWar <= 1.5.0 R12 Remote File Inclusion Exploit
- PHPMyChat <= 0.14.5 remote cmmnds xctn
- ADODB tmssql.php Denial of service
- PhpOpenChat 3.0.x ADODB Server.php SQL injection
- PHPList <= 2.10.2 GLOBALS[] remote cmmnds xctn
- Simplog <= 0.9.2 remote cmmnds xctn
- PHP121 Instant Messenger <= 1.4 remote cmmnds xctn
- sysinfo.cgi 1.21 remote cmmnds xctn
- PHP Album <= 0.3.2.3 remote cmmnds xctn
- PCPIN Chat <= 5.0.4 remote cmmnds xctn
- PHPSurveyor <= 0.995 remote cmmnds xctn
- Invision Power Board 2.* commands execution exploit
- X7 Chat <=2.0 arbitrary local inclusion
- HiveMail <= 1.3 remote command execution exploit
- TinyFTPD <= 1.4 USER command D.O.S
- Unclassified NewsBoard <= 1.6.1 exploit
- PhpBB <= v2.0.20 remote commands execution
- Sugar Suite Open Source <= 4.2 arbitrary remote inclusion exploit
- DeluxeBB <= v1.06 attachment mod_mime exploit
- XOOPS <= 2.0.13.2 exploit
- Nucleus <= 3.22 arbitrary remote inclusion exploit
- Drupal <= 4.7 attachment mod_mime exploit
- pppBlog <= 0.3.8 system disclosure exploit
- Pixelpost <= 1-5rc1-2 privilege escalation exploit
- DotClear <= 1.2.4 arbitrary remote inclusion
- LifeType <= 1.0.4_r3270 SQL injection
- QBik Wingate version 6.1.1.1077 remote exploit for Win2k SP4 (german)
- blur6ex <= 0.3.462 'ID' blind SQL injection / admin credentials disclosure
- bitweaver <= v1.3 'tmpImagePath' attachment mod_mime exploit
- Mambo <= 4.6rc1 'Weblinks' blind SQL injection / admin credentials
- DataLife Engine sql injection exploit
- Mambo <= 4.6rc1 'Weblinks' blind SQL injection / admin credentials
- Jaws <= 0.6.2 SQL injection / admin credentials disclosure
- Microsoft Office Excel 2003 Hlink Stack/SEH Overflow Exploit
- BLOG:CMS <= 4.0.0k sql injection/admin credentials disclosure exploit
- Pivot <= 1.30 RC2 privileges escalation / remote commands execution exploit
- PAPOO <= 3_RC3 SQL injection / admin credentials disclosure
- PhpBB 3 memberlist.php/'ip' argument SQL injection / admin credentials disclosure
- PHORUM 5 arbitrary local inclusion exploit
- Invision Power Board v2.1 <= 2.1.6 sql injection exploit
- MyBB <= 1.1.5 SQL injection / create new admin exploit
- ToendaCMS <= 1.0.0 remote commands execution
- LoudBlog <= 0.5 'id' SQL injection / admin credentials disclosure
- X7 Chat <=2.0.4 'old_prefix' blind SQL injection / privilege escalation exploit
- Etomite CMS <= 0.6.1 (all patches applied) 'username' SQL injection / admin credentials disclosure
- Etomite CMS <= 0.6.1 'rfiles.php' remote command execution
- ATutor <= 1.5.3.1 'links' blind SQL injection / admin credentials disclosure
- XMB <= 1.9.6 'u2uid' SQL injection / admin credentials disclosure
- SendCard <= 3.4.0 unauthorized administrative access / remote commands
- MyBloggie <= 2.1.4 trackback.php multiple SQL injections vulnerability
- XMB <= 1.9.6 Final basename() 'langfilenew' arbitrary local inclusion / remote commands xctn
- CubeCart <= 3.0.11 blind SQL injection / admin credentials disclosure exploit
- MercuryBoard <= 1.1.4 SQL injection / privilege escalation exploit
- phpGroupWare <= 0.9.16.010 Remote Code Execution Exploit
- TikiWiki <= 1.9 Sirius remote commands execution exploit
- PmWiki <= 2.1.19 Zend_Hash_Del_Key_Or_Index/remote commands execution exploit
- pHNews <= alpha 1 (templates_dir) Remote Code Execution Exploit
- PHP Proxima <= v.6 Remote Code Execution Exploit
- PhpCommander <= 3.0 Remote Code Execution Exploit
- DokuWiki <= 2006-03-09b remote commands execution xploit
- RaidenHTTPD/1.1.49 remote commands execution exploit
- CCleague Pro Sports CMS <= 1.0.1RC1 (Cookie) Remote Code Execution Exploit
- Limbo <= 1.0.4.2L remote commands execution exploit
- Exponent CMS 0.96.3 stable arbitrary local inclusion / remote commands xctn exploit
- PhpBlueDragon CMS <= 2.9 (XSS/SQL) Remote Code Execution Exploit
- Microsoft Internet Explorer VML Remote Buffer Overflow (Windows XP SP0-SP1 + Windows 2000 SP4)
- Microsoft Internet Explorer VML Remote Buffer Overflow (Windows XP SP2)
- KGB 1.8+ <= 1.8 full Remote Code Execution Exploit
- Flatnuke 2.5.8 arbitrary local inclusion/delete all users exploit
- WSN Forum <= 1.3.4 Remote File Include Exploit / Code Execution Vulnerability
- PHP-Post <= 1.01 Remote Code Execution Exploit
- YapBB <= 1.2 Beta2 Remote File Include Exploit
- PH Pexplorer <= 0.24 Remote Code Execution Exploit
- JaxUltraBB <= 2.0 Defaced Exploit
- Ascended Guestbook <= 1.0.0 Remote File Include Exploit
- JaxUltraBB v2.0 Topic Reply Command Execution Exploit
- Discuz! 5.0.0 GBK SQL injection / admin credentials disclosure exploit
- Imageview <= 5 Remote Code Execution Exploit
- miniBB <= 2.0.2 Remote File Include Exploit
- Light Blog Multiple Vulnerabilities Exploit
- Novell eDirectory 8.8 NDS Server Remote Stack Overflow Exploit
- Nitrotech <= 0.0.3a Remote Code Execution Exploit
- T.G.S. CMS <= 0.1.7 Remote SQL Injection Exploit
- Innovate Portal <= 2.0 Remote Code Execution Exploit
- Woltlab Burning Board Lite 1.0.2 sql injection exploit
- Discuz! 4.x SQL injection / admin credentials disclosure exploit
- Kubix <=0.7 Multiple Vulnerabilities Exploit
- PHPUpdate <= 2.7 extract() auth bypass / shell inject
- Open Newsletter <= 2.* Vulnerabilities
- PHP-Update <= 2.7 str_replace() sql injection / privilege escalation
- Cacti <= 0.8.6i popen() injection
- Cacti 0.8.6i sql injection create new admin exploit
- Remote exploit for buffer overflow vulnerability in CA BrightStor Arcserve
- Wordpress <= 2.0.6 wp-trackback.php sql injection admin hash disclosure exploit
- sNews <= 1.5.30 unauthorized access / reset admin pass / cmd exec exploit
- ThWboard <=3.0 beta 2.84-php5 board[styleid] sql injection / cmd exec exploit
- Woltlab Burning Board Lite <= 1.0.2
- Xero Portal v1.2 Local File Include Vulnerablity
- Golem Gaming Portal Remote File Include Exploit
- Guppy <= 4.5.16 remote commands execution exploit
- Remote Oracle dbms_export_extension exploit
- Advanced Poll 2.0.0 >= 2.0.5-dev textfile admin session gen
- Xaran Cms <= V2.0 Remote SQL Injection Exploit
- Mail Enable Professional/Enterprise <=v2.35 (win32)
- Exploit for PHP-nuke <=8.0 Final
- WebSPELL <= v4.01.02 (topic) Remote SQL Injection
- Exploit Oracle Database 10g Enterprise Edition Release 10.1.0.3.0
- vBulletin <= 3.6.4 sql injection / privilege escalation by session hijacking exploit
- News-Letterman 1.1 (eintrag.php) Remote File Include Exploit
- AJ Forum 1.0 (topic_title.php) Remote BLIND SQL Injection Exploit
- InoutMailingListManager <= 3.1 Command Execution Exploit + Login Retrieve + Advisory
- mxBB Module MX Faq & Rules <= 2.0.0 (faq.php) Remote File Include Exploit
- IE 6 / DB Software Laboratory VImpX ActiveX (VImpX.ocx v. 4.7.3.0) remote buffer overflow exploit
- AlstraSoft E-Friends <= 4.21 Admin Session Retrieve Exploit
- AlstraSoft Template Seller Pro <= 3.25 Admin Password Change Exploit
- IE 6 / Pegasus ImagN' ActiveX Control (IMW32O40.OCX V4.00.041) remote buffer overflow exploit
- gCards <= 1.46 SQL Injection/Remote Code Execution Exploit
- Inout Search Engine (all version) Remote Code Execution Exploit
- ................
- And include more outdated exploits
- Download: (Update - 18/02/2016)
- http://nitroflare.com/view/52E32472DDF19E0/VEK_-_Vulnerability_Exploit_Kit_DEMO.exe
Advertisement
Add Comment
Please, Sign In to add comment