deardaniel/secdata-raw huggingface dataset:
Metasploit Module: SAP SOAP Service RFC_PING Login Brute Forcer
Type: auxiliary
Path: modules/auxiliary/scanner/sap/sap_soap_rfc_brute_login.rb
References: URL-https://labs.f-secure.com/tools/sap-metasploit-modules/

Description:
This module attempts to brute force SAP username and passwords through the
        /sap/bc/soap/rfc SOAP service, using RFC_PING function.
Metasploit Module: SAP Web GUI Login Brute Forcer
Type: auxiliary
Path: modules/auxiliary/scanner/sap/sap_web_gui_brute_login.rb
References: URL-https://labs.f-secure.com/tools/sap-metasploit-modules/

Description:
This module attempts to brute force SAP username and passwords through the SAP Web
        GUI service. Default clients can be	tested without needing to set a CLIENT. Common
        and default user/password combinations can be tested just setting the DEFAULT_CRED
        variable to true. The MSF_DATA_DIRECTORY/wordlists/sap_default.txt path store
        stores these default combinations.
Metasploit Module: SAP SMB Relay Abuse
Type: auxiliary
Path: modules/auxiliary/scanner/sap/sap_smb_relay.rb
References: URL-http://erpscan.com/advisories/dsecrg-12-033-sap-basis-6-407-02-xml-external-entity/, URL-https://launchpad.support.sap.com/#/notes/1597066

Description:
This module exploits provides several SMB Relay abuse through different SAP
        services and functions. The attack is done through specially crafted requests
        including a UNC path which will be accessing by the SAP system while trying to
        process the request.  In order to get the hashes the auxiliary/server/capture/smb
        module can be used.
Metasploit Module: Energizer DUO Trojan Scanner
Type: auxiliary
Path: modules/auxiliary/scanner/backdoor/energizer_duo_detect.rb
Authors: hdm
References: CVE-2010-0103, OSVDB-62782, US-CERT-VU-154421

Description:
Detect instances of the Energizer DUO trojan horse software on port 7777.
Metasploit Module: GTP Echo Scanner
Type: auxiliary
Path: modules/auxiliary/scanner/gprs/gtp_echo.rb
References: URL-https://insinuator.net/tag/gtp/, URL-https://www.etsi.org/deliver/etsi_ts/129200_129299/129281/08.00.00_60/ts_129281v080000p.pdf

Description:
This module sends UDP GTP (GTP-U) echo requests to the target RHOSTS and
        reports on which ones respond, thus identifying General Packet Radio
        Service (GPRS) servers. This module does not support scanning with SCTP.
Metasploit Module: Wardialer
Type: auxiliary
Path: modules/auxiliary/scanner/telephony/wardial.rb

Description:
Scan for dial-up systems that are connected to modems and answer telephony indials.
Metasploit Module: Foxit Reader Authorization Bypass
Type: auxiliary
Path: modules/auxiliary/pdf/foxit/authbypass.rb
Disclosure date: 2009-03-09
References: CVE-2009-0836, OSVDB-55615, BID-34035

Description:
This module exploits an authorization bypass vulnerability in Foxit Reader
          build 1120. When an attacker creates a specially crafted pdf file containing
          an Open/Execute action, arbitrary commands can be executed without confirmation
          from the victim.
Metasploit Module: Auxiliary Parser Windows Unattend Passwords
Type: auxiliary
Path: modules/auxiliary/parser/unattend.rb
References: URL-https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-8.1-and-8/ff715801(v=win.10), URL-https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-vista/cc749415(v=ws.10), URL-https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc732280(v=ws.10), URL-https://learn.microsoft.com/en-us/windows-hardware/manufacture/desktop/update-windows-settings-and-scripts-create-your-own-answer-file-sxs?view=windows-11

Description:
This module parses Windows answer files (Unattend files) in the target directory.

          See also: post/windows/gather/enum_unattend
Metasploit Module: BNAT Router
Type: auxiliary
Path: modules/auxiliary/bnat/bnat_router.rb
References: URL-https://github.com/claudijd/bnat, URL-http://www.slideshare.net/claudijd/dc-skytalk-bnat-hijacking-repairing-broken-communication-channels

Description:
This module will properly route BNAT traffic and allow for connections to be
        established to machines on ports which might not otherwise be accessible.
Metasploit Module: BNAT Scanner
Type: auxiliary
Path: modules/auxiliary/bnat/bnat_scan.rb
References: URL-https://github.com/claudijd/bnat, URL-http://www.slideshare.net/claudijd/dc-skytalk-bnat-hijacking-repairing-broken-communication-channels

Description:
This module is a scanner which can detect Broken NAT (network address translation)
        implementations, which could result in an inability to reach ports on remote
        machines. Typically, these ports will appear in nmap scans as 'filtered'/'closed'.
Metasploit Module: OpenEMR 5.0.1 Patch 6 SQLi Dump
Type: auxiliary
Path: modules/auxiliary/sqli/openemr/openemr_sqli_dump.rb
Disclosure date: 2019-05-17
References: CVE-2018-17179, URL-https://github.com/openemr/openemr/commit/3e22d11c7175c1ebbf3d862545ce6fee18f70617

Description:
This module exploits a SQLi vulnerability found in
          OpenEMR version 5.0.1 Patch 6 and lower. The
          vulnerability allows the contents of the entire
          database (with exception of log and task tables) to be
          extracted.
          This module saves each table as a `.csv` file in your
          loot directory and has been tested with
          OpenEMR 5.0.1 (3).

Check method (fingerprinting):
# Check version
    print_status('Trying to detect installed version')
    version = openemr_version
    return Exploit::CheckCode::Unknown('Could not determine OpenEMR version') if version.empty?

    vprint_status("Version #{version} detected")
    version.sub! ' (', '.'
    version.sub! ')', ''
    version.strip!

    return Exploit::CheckCode::Safe("OpenEMR version #{version} is not vulnerable") unless Rex::Version.new(version) < Rex::Version.new('5.0.1.7')

    Exploit::CheckCode::Appears("OpenEMR version #{version} is in the vulnerable range")
  end
Metasploit Module: Oracle DB SQL Injection via SYS.DBMS_METADATA.GET_XML
Type: auxiliary
Path: modules/auxiliary/sqli/oracle/dbms_metadata_get_xml.rb
Disclosure date: 2008-01-05
References: URL-http://www.metasploit.com

Description:
This module will escalate an Oracle DB user to DBA by exploiting a sql injection
          bug in the SYS.DBMS_METADATA.GET_XML package/function.
Metasploit Module: Oracle DB 10gR2, 11gR1/R2 DBMS_JVM_EXP_PERMS OS Command Execution
Type: auxiliary
Path: modules/auxiliary/sqli/oracle/jvm_os_code_10g.rb
Disclosure date: 2010-02-01
References: CVE-2010-0866, OSVDB-62184, URL-http://blackhat.com/html/bh-dc-10/bh-dc-10-archives.html#Litchfield, URL-http://www.notsosecure.com/folder2/2010/02/04/hacking-oracle-11g/

Description:
This module exploits a flaw (0 day) in DBMS_JVM_EXP_PERMS package that allows
          any user with create session privilege to grant themselves java IO privileges.
          Identified by David Litchfield. Works on 10g R2, 11g R1 and R2 (Windows only)
Metasploit Module: Oracle DB 11g R1/R2 DBMS_JVM_EXP_PERMS OS Code Execution
Type: auxiliary
Path: modules/auxiliary/sqli/oracle/jvm_os_code_11g.rb
Disclosure date: 2010-02-01
References: CVE-2010-0866, OSVDB-62184, URL-http://blackhat.com/html/bh-dc-10/bh-dc-10-archives.html#Litchfield, URL-http://www.notsosecure.com/folder2/2010/02/04/hacking-oracle-11g/

Description:
This module exploits a flaw (0 day) in DBMS_JVM_EXP_PERMS package that allows
          any user with create session privilege to grant themselves java IO privileges.
          Identified by David Litchfield. Works on 11g R1 and R2 (Windows only).
Metasploit Module: Oracle DB SQL Injection via SYS.LT.FINDRICSET Evil Cursor Method
Type: auxiliary
Path: modules/auxiliary/sqli/oracle/lt_findricset_cursor.rb
Disclosure date: 2007-10-17
Authors: CG
References: CVE-2007-5511, OSVDB-40079, BID-26098, URL-http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpuoct2007.html

Description:
This module will escalate an Oracle DB user to DBA by exploiting
          a sql injection bug in the SYS.LT.FINDRICSET package via Evil
          Cursor technique. Tested on oracle 10.1.0.3.0 -- should work on
          thru 10.1.0.5.0 and supposedly on 11g. Fixed with Oracle Critical
          Patch update October 2007.
Metasploit Module: Oracle DB SQL Injection via SYS.LT.REMOVEWORKSPACE
Type: auxiliary
Path: modules/auxiliary/sqli/oracle/lt_removeworkspace.rb
Disclosure date: 2008-10-13
References: CVE-2008-3984, OSVDB-49326

Description:
This module exploits a sql injection flaw in the REMOVEWORKSPACE
          procedure of the PL/SQL package SYS.LT. Any user with execute
          privilege on the vulnerable package can exploit this vulnerability.
Metasploit Module: Oracle DB SQL Injection in MDSYS.SDO_TOPO_DROP_FTBL Trigger
Type: auxiliary
Path: modules/auxiliary/sqli/oracle/droptable_trigger.rb
Disclosure date: 2009-01-13
References: CVE-2008-3979, OSVDB-51354, URL-http://www.securityfocus.com/archive/1/500061, URL-http://www.ngssoftware.com/

Description:
This module will escalate an Oracle DB user to MDSYS by exploiting a sql injection bug in
          the MDSYS.SDO_TOPO_DROP_FTBL trigger. After that exploit escalate user to DBA using "CREATE ANY TRIGGER" privilege
          given to MDSYS user by creating evil trigger in system scheme (2-stage attack).
Metasploit Module: Oracle DB SQL Injection via SYS.DBMS_METADATA.OPEN
Type: auxiliary
Path: modules/auxiliary/sqli/oracle/dbms_metadata_open.rb
Disclosure date: 2008-01-05
References: URL-http://www.metasploit.com

Description:
This module will escalate a Oracle DB user to DBA by exploiting an sql injection
          bug in the SYS.DBMS_METADATA.OPEN package/function.
Metasploit Module: Oracle DB SQL Injection via SYS.DBMS_CDC_PUBLISH.ALTER_AUTOLOG_CHANGE_SOURCE
Type: auxiliary
Path: modules/auxiliary/sqli/oracle/dbms_cdc_publish.rb
Disclosure date: 2008-10-22
References: CVE-2008-3995, OSVDB-49320

Description:
The module exploits an sql injection flaw in the ALTER_AUTOLOG_CHANGE_SOURCE
          procedure of the PL/SQL package DBMS_CDC_PUBLISH. Any user with execute privilege
          on the vulnerable package can exploit this vulnerability. By default, users granted
          EXECUTE_CATALOG_ROLE have the required privilege.
          Affected versions: Oracle Database Server versions 10gR1, 10gR2 and 11gR1.
          Fixed with October 2008 CPU.
Metasploit Module: Oracle DB SQL Injection via SYS.DBMS_CDC_SUBSCRIBE.ACTIVATE_SUBSCRIPTION
Type: auxiliary
Path: modules/auxiliary/sqli/oracle/dbms_cdc_subscribe_activate_subscription.rb
Disclosure date: 2005-04-18
References: CVE-2005-4832, BID-13236, OSVDB-15553, URL-http://www.appsecinc.com/resources/alerts/oracle/2005-02.html, URL-http://www.argeniss.com/research/OraDBMS_CDC_SUBSCRIBEExploit.txt

Description:
This module will escalate an Oracle DB user to DBA by exploiting a sql injection
          bug in the SYS.DBMS_CDC_SUBSCRIBE.ACTIVATE_SUBSCRIPTION package/function.
          This vulnerability affects to Oracle Database Server 9i up to 9.2.0.5 and
          10g up to 10.1.0.4.
Metasploit Module: Oracle DB SQL Injection via SYS.LT.ROLLBACKWORKSPACE
Type: auxiliary
Path: modules/auxiliary/sqli/oracle/lt_rollbackworkspace.rb
Disclosure date: 2009-05-04
References: CVE-2009-0978, OSVDB-53734, URL-http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpuapr2009.html

Description:
This module exploits a sql injection flaw in the ROLLBACKWORKSPACE
          procedure of the PL/SQL package SYS.LT. Any user with execute
          privilege on the vulnerable package can exploit this vulnerability.
Metasploit Module: Oracle DB SQL Injection via DBMS_EXPORT_EXTENSION
Type: auxiliary
Path: modules/auxiliary/sqli/oracle/dbms_export_extension.rb
Disclosure date: 2006-04-26
References: CVE-2006-2081, OSVDB-25002, BID-17699, URL-http://www.red-database-security.com/exploits/oracle-sql-injection-oracle-dbms_export_extension.html

Description:
This module will escalate an Oracle DB user to DBA by exploiting a
          sql injection bug in the DBMS_EXPORT_EXTENSION.GET_DOMAIN_INDEX_METADATA package.

          Note: This module has been tested against 9i, 10gR1 and 10gR2.
Metasploit Module: Oracle DB SQL Injection via SYS.DBMS_CDC_PUBLISH.DROP_CHANGE_SOURCE
Type: auxiliary
Path: modules/auxiliary/sqli/oracle/dbms_cdc_publish2.rb
Disclosure date: 2010-04-26
References: CVE-2010-0870, OSVDB-63772, URL-http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpuapr2010.html

Description:
The module exploits an sql injection flaw in the DROP_CHANGE_SOURCE
          procedure of the PL/SQL package DBMS_CDC_PUBLISH. Any user with execute privilege
          on the vulnerable package can exploit this vulnerability. By default, users granted
          EXECUTE_CATALOG_ROLE have the required privilege.
Metasploit Module: Oracle DB SQL Injection via SYS.DBMS_CDC_IPUBLISH.ALTER_HOTLOG_INTERNAL_CSOURCE
Type: auxiliary
Path: modules/auxiliary/sqli/oracle/dbms_cdc_ipublish.rb
Disclosure date: 2008-10-22
References: CVE-2008-3996, OSVDB-49321

Description:
The module exploits an sql injection flaw in the ALTER_HOTLOG_INTERNAL_CSOURCE
          procedure of the PL/SQL package DBMS_CDC_IPUBLISH. Any user with execute privilege
          on the vulnerable package can exploit this vulnerability. By default, users granted
          EXECUTE_CATALOG_ROLE have the required privilege.  Affected versions: Oracle Database
          Server versions 10gR1, 10gR2 and 11gR1. Fixed with October 2008 CPU.
Metasploit Module: Oracle DB SQL Injection via SYS.LT.COMPRESSWORKSPACE
Type: auxiliary
Path: modules/auxiliary/sqli/oracle/lt_compressworkspace.rb
Disclosure date: 2008-10-13
References: CVE-2008-3982, OSVDB-49324, URL-http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpuoct2008.html

Description:
This module exploits an sql injection flaw in the COMPRESSWORKSPACE
          procedure of the PL/SQL package SYS.LT. Any user with execute
          privilege on the vulnerable package can exploit this vulnerability.
Metasploit Module: Oracle DB SQL Injection via SYS.DBMS_METADATA.GET_GRANTED_XML
Type: auxiliary
Path: modules/auxiliary/sqli/oracle/dbms_metadata_get_granted_xml.rb
Disclosure date: 2008-01-05
References: URL-http://www.metasploit.com

Description:
This module will escalate an Oracle DB user to DBA by exploiting a sql injection
          bug in the SYS.DBMS_METADATA.GET_GRANTED_XML package/function.
Metasploit Module: Oracle DB SQL Injection via SYS.DBMS_CDC_PUBLISH.CREATE_CHANGE_SET
Type: auxiliary
Path: modules/auxiliary/sqli/oracle/dbms_cdc_publish3.rb
Disclosure date: 2010-10-13
References: CVE-2010-2415, OSVDB-70078, URL-http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html

Description:
The module exploits an sql injection flaw in the CREATE_CHANGE_SET
          procedure of the PL/SQL package DBMS_CDC_PUBLISH. Any user with execute privilege
          on the vulnerable package can exploit this vulnerability. By default, users granted
          EXECUTE_CATALOG_ROLE have the required privilege.
Metasploit Module: Oracle DB SQL Injection via SYS.LT.MERGEWORKSPACE
Type: auxiliary
Path: modules/auxiliary/sqli/oracle/lt_mergeworkspace.rb
Disclosure date: 2008-10-22
References: CVE-2008-3983, OSVDB-49325, URL-http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpuoct2008.html, URL-http://www.dsecrg.com/pages/expl/show.php?id=23

Description:
This module exploits a sql injection flaw in the MERGEWORKSPACE
          procedure of the PL/SQL package SYS.LT. Any user with execute
          privilege on the vulnerable package can exploit this vulnerability.
Metasploit Module: D-Link Central WiFiManager SQL injection
Type: auxiliary
Path: modules/auxiliary/sqli/dlink/dlink_central_wifimanager_sqli.rb
Disclosure date: 2019-07-06
References: CVE-2019-13373, URL-https://unh3x.github.io/2019/02/21/D-link-(CWM-100)-Multiple-Vulnerabilities/

Description:
This module exploits a SQLi vulnerability found in
          D-Link Central WiFi Manager CWM(100) before v1.03R0100_BETA6. The
          vulnerability is an exposed API endpoint that allows the execution
          of SQL queries without authentication, using this vulnerability, it's
          possible to retrieve usernames and password hashes of registered users,
          device configuration, and other data, it's also possible to add users,
          or edit database information.

Check method (fingerprinting):
check_error = nil
    sqli = create_sqli(dbms: PostgreSQLi::Common, opts: { encoder: :base64 }) do |payload|
      res = vulnerable_request(payload)
      if res && res.code == 200
        res.body[%r{<column>(.+)</column>}m, 1] || ''
      else
        if res
          check_error = Exploit::CheckCode::Safe('Target responded but does not appear vulnerable')
        else
          check_error = Exploit::CheckCode::Unknown('Failed to send HTTP request')
        end
        '' # because a String is expected, this will make test_vulnerable to return false, but we will just get check_error
      end
    end
    vulnerable_test = sqli.test_vulnerable
    check_error || (vulnerable_test ? Exploit::CheckCode::Vulnerable('SQL injection confirmed') : Exploit::CheckCode::Safe('SQL injection test did not succeed'))
  end
Metasploit Module: Metasploit Web Crawler
Type: auxiliary
Path: modules/auxiliary/crawler/msfcrawler.rb
Authors: et

Description:
This auxiliary module is a modular web crawler, to be used in conjunction with wmap (someday) or standalone.
Metasploit Module: RPC DoS targeting *nix rpcbind/libtirpc
Type: auxiliary
Path: modules/auxiliary/dos/rpc/rpcbomb.rb
References: CVE-2017-8779, BID-98325, URL-http://openwall.com/lists/oss-security/2017/05/03/12

Description:
This module exploits a vulnerability in certain versions of
          rpcbind, LIBTIRPC, and NTIRPC, allowing an attacker to trigger
          large (and never freed) memory allocations for XDR strings on
          the target.
Metasploit Module: General Electric D20ME TFTP Server Buffer Overflow DoS
Type: auxiliary
Path: modules/auxiliary/dos/scada/d20_tftp_overflow.rb
Disclosure date: 2012-01-19
References: URL-http://www.digitalbond.com/tools/basecamp/metasploit-modules/

Description:
By sending a malformed TFTP request to the GE D20ME, it is possible to crash the
          device.

          This module is based on the original 'd20ftpbo.rb' Basecamp module from
          DigitalBond.
Metasploit Module: Beckhoff TwinCAT SCADA PLC 2.11.0.2004 DoS
Type: auxiliary
Path: modules/auxiliary/dos/scada/beckhoff_twincat.rb
Disclosure date: 2011-09-13
References: CVE-2011-3486, OSVDB-75495, URL-http://aluigi.altervista.org/adv/twincat_1-adv.txt

Description:
The Beckhoff TwinCAT version <= 2.11.0.2004 can be brought down by sending
          a crafted UDP packet to port 48899 (TCATSysSrv.exe).
Metasploit Module: Yokogawa CENTUM CS 3000 BKCLogSvr.exe Heap Buffer Overflow
Type: auxiliary
Path: modules/auxiliary/dos/scada/yokogawa_logsvr.rb
Disclosure date: 2014-03-10
References: URL-http://www.yokogawa.com/dcs/security/ysar/YSAR-14-0001E.pdf, URL-https://web.archive.org/web/[PII_REDACTED]0848/https://www.rapid7.com/blog/post/2014/03/10/yokogawa-centum-cs3000-vulnerabilities/, CVE-2014-0781

Description:
This module abuses a buffer overflow vulnerability to trigger a Denial of Service
          of the BKCLogSvr component in the Yokogaca CENTUM CS 3000 product. The vulnerability
          exists in the handling of malformed log packets, with an unexpected long level field.
          The root cause of the vulnerability is a combination of usage of uninitialized memory
          from the stack and a dangerous string copy. This module has been tested successfully
          on Yokogawa CENTUM CS 3000 R3.08.50.
Metasploit Module: DoS Exploitation of Allen-Bradley's Legacy Protocol (PCCC)
Type: auxiliary
Path: modules/auxiliary/dos/scada/allen_bradley_pccc.rb
References: CVE-2017-7924, URL-https://www.cisa.gov/uscert/ics/advisories/ICSA-17-138-03, URL-https://web.archive.org/web/[PII_REDACTED]0051/https://dl.acm.org/doi/10.1145/3[PII_REDACTED]780

Description:
A remote, unauthenticated attacker could send a single, specially crafted
        Programmable Controller Communication Commands (PCCC) packet to the controller
        that could potentially cause the controller to enter a DoS condition.
        MicroLogix 1100 controllers are affected: 1763-L16BWA, 1763-L16AWA, 1763-L16BBB, and
        1763-L16DWD.
        CVE-2017-7924 has been assigned to this vulnerability.
        A CVSS v3 base score of 7.5 has been assigned.

Check method (fingerprinting):
connect_udp

    udp_sock.put(enip_list_identify_pkt)
    res = udp_sock.recvfrom(90)

    disconnect_udp

    unless res && res[0].length > 63 && res[0][0, 2] == "\x63\x00"
      print_error 'EtherNet/IP Packet Not Valid'
      return Exploit::CheckCode::Unsupported('Target did not return a valid EtherNet/IP response')
    end

    res[0][54, 2]
    product_name_len = res[0][62].unpack('c*')[0]

    product_name = res[0][63, product_name_len]
    print_status "Product Name: #{product_name}"

    array = product_name.split(' ')
    plc_model = array[0]

    return Exploit::CheckCode::Safe("PLC model #{plc_model} is not in the vulnerable list") unless VULN_LIST.any? { |e| plc_model.include? e }

    firmware = array[1]
    begin
      firmware_nbr = firmware.scan(/(\d+[.,]\d+)/).flatten.first.to_f
      if firmware_nbr >= VULN_FW_VERSION_MIN && firmware_nbr < VULN_FW_VERSION_MAX
        return Exploit::CheckCode::Vulnerable("#{plc_model} firmware #{firmware_nbr} is in the vulnerable range")
      elsif firmware_nbr < VULN_FW_VERSION_MIN
        return Exploit::CheckCode::Appears("#{plc_model} firmware #{firmware_nbr} may be vulnerable")
      else
        return Exploit::CheckCode::Safe("#{plc_model} firmware #{firmware_nbr} is patched")
      end
    rescue StandardError
      return Exploit::CheckCode::Unknown('Could not parse firmware version')
    end
  rescue Rex::AddressInUse, ::Errno::ETIMEDOUT, Rex::HostUnreachable, Rex::ConnectionTimeout, Rex::ConnectionRefused, ::Tim
Metasploit Module: 7-Technologies IGSS 9 IGSSdataServer.exe DoS
Type: auxiliary
Path: modules/auxiliary/dos/scada/igss9_dataserver.rb
Disclosure date: 2011-12-20
References: CVE-2011-4050, OSVDB-77976, URL-https://www.cisa.gov/uscert/ics/advisories/ICSA-11-335-01

Description:
The 7-Technologies SCADA IGSS Data Server (IGSSdataServer.exe) <= 9.0.0.10306 can be
          brought down by sending a crafted TCP packet to port 12401.  This should also work
          for version <= 9.0.0.1120, but that version hasn't been tested.
Metasploit Module: Siemens SIPROTEC 4 and SIPROTEC Compact EN100 Ethernet Module - Denial of Service
Type: auxiliary
Path: modules/auxiliary/dos/scada/siemens_siprotec4.rb
References: CVE-2015-5374, EDB-44103, URL-https://www.cisa.gov/uscert/ics/advisories/ICSA-15-202-01

Description:
This module sends a specially crafted packet to port 50000/UDP
         causing a denial of service of the affected (Siemens SIPROTEC 4 and SIPROTEC Compact < V4.25) devices.
         A manual reboot is required to return the device to service.
         CVE-2015-5374 and a CVSS v2 base score of 7.8 have been assigned to this vulnerability.
Metasploit Module: Sendmail SMTP Address prescan Memory Corruption
Type: auxiliary
Path: modules/auxiliary/dos/smtp/sendmail_prescan.rb
Disclosure date: 2003-09-17
References: OSVDB-2577, CVE-2003-0694, BID-8641, EDB-24

Description:
This is a proof of concept denial of service module for Sendmail versions
          8.12.8 and earlier. The vulnerability is within the prescan() method when
          parsing SMTP headers. Due to the prescan function, only 0x5c and 0x00
          bytes can be used, limiting the likelihood for arbitrary code execution.