deardaniel/secdata-raw huggingface dataset:
Metasploit Module: Flexense HTTP Server Denial Of Service
Type: auxiliary
Path: modules/auxiliary/dos/http/flexense_http_server_dos.rb
Disclosure date: 2018-03-09
References: CVE-2018-8065, URL-https://github.com/EgeBalci/Sync_Breeze_Enterprise_10_6_24_-DOS

Description:
This module triggers a Denial of Service vulnerability in the Flexense HTTP server.
          Vulnerability caused by a user mode write access memory violation and can be triggered with
          rapidly sending variety of HTTP requests with long HTTP header values.

          Multiple Flexense applications that are using Flexense HTTP server 10.6.24 and below versions reportedly vulnerable.

Check method (fingerprinting):
connect
    sock.put("GET / HTTP/1.0\r\n\r\n")
    res = sock.get
    if res && res.include?('Flexense HTTP Server v10.6.24')
      Exploit::CheckCode::Appears('Flexense HTTP Server v10.6.24 detected')
    else
      Exploit::CheckCode::Safe('Target does not appear to be Flexense HTTP Server v10.6.24')
    end
  rescue Rex::ConnectionRefused
    print_error('Target refused the connection')
    Exploit::CheckCode::Unknown('Target refused the connection')
  rescue StandardError
    print_error('Target did not respond to HTTP request')
    Exploit::CheckCode::Unknown('Target did not respond to HTTP request')
  end
Metasploit Module: WordPress Long Password DoS
Type: auxiliary
Path: modules/auxiliary/dos/http/wordpress_long_password_dos.rb
Disclosure date: 2014-11-20
References: CVE-2014-9016, URL-https://nvd.nist.gov/vuln/detail/CVE-2014-9034, OSVDB-114857

Description:
WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x
          before 4.0.1 allows remote attackers to cause a denial of service
          (CPU consumption) via a long password that is improperly handled
          during hashing.
Metasploit Module: IBM Notes encodeURI DOS
Type: auxiliary
Path: modules/auxiliary/dos/http/ibm_lotus_notes.rb
Disclosure date: 2017-08-31
References: EDB-42602, CVE-2017-1129, URL-http://www-01.ibm.com/support/docview.wss?uid=swg21999385

Description:
This module exploits a vulnerability in the native browser that comes with IBM Lotus Notes.
          If successful, it could cause the Notes client to hang and have to be restarted.
Metasploit Module: Dell OpenManage POST Request Heap Overflow (win32)
Type: auxiliary
Path: modules/auxiliary/dos/http/dell_openmanage_post.rb
Disclosure date: 2004-02-26
References: URL-http://archives.neohapsis.com/archives/bugtraq/2004-02/0650.html, BID-9750, OSVDB-4077, CVE-2004-0331

Description:
This module exploits a heap overflow in the Dell OpenManage
          Web Server (omws32.exe), versions 3.2-3.7.1. The vulnerability
          exists due to a boundary error within the handling of POST requests,
          where the application input is set to an overly long file name.
          This module will crash the web server, however it is likely exploitable
          under certain conditions.
Metasploit Module: Canon Wireless Printer Denial Of Service
Type: auxiliary
Path: modules/auxiliary/dos/http/canon_wireless_printer.rb
Disclosure date: 2013-06-18
References: CVE-2013-4615, URL-https://www.mattandreko.com/2013/06/canon-y-u-no-security.html

Description:
The HTTP management interface on several models of Canon Wireless printers
          allows for a Denial of Service (DoS) condition via a crafted HTTP request. Note:
          if this module is successful, the device can only be recovered with a physical
          power cycle.
Metasploit Module: ua-parser-js npm module ReDoS
Type: auxiliary
Path: modules/auxiliary/dos/http/ua_parser_js_redos.rb
References: CVE-2017-16086, URL-https://github.com/faisalman/ua-parser-js/commit/25e143ee7caba78c6405a57d1d06b19c1e8e2f79

Description:
This module exploits a Regular Expression Denial of Service vulnerability
        in the npm module "ua-parser-js". Server-side applications that use
        "ua-parser-js" for parsing the browser user-agent string will be vulnerable
        if they call the "getOS" or "getResult" functions. This vulnerability was
        fixed as of version 0.7.16.
Metasploit Module: Wordpress XMLRPC DoS
Type: auxiliary
Path: modules/auxiliary/dos/http/wordpress_xmlrpc_dos.rb
Disclosure date: 2014-08-06
References: CVE-2014-5266, URL-https://wordpress.org/news/2014/08/wordpress-3-9-2/, URL-http://www.breaksec.com/?p=6362, URL-https://mashable.com/archive/wordpress-xml-blowup-dos, URL-https://core.trac.wordpress.org/changeset/29404

Description:
Wordpress XMLRPC parsing is vulnerable to a XML based denial of service.
          This vulnerability affects Wordpress 3.5 - 3.9.2 (3.8.4 and 3.7.4 are
          also patched).
Metasploit Module: Ruby on Rails JSON Processor Floating Point Heap Overflow DoS
Type: auxiliary
Path: modules/auxiliary/dos/http/rails_json_float_dos.rb
Disclosure date: 2013-11-22
References: CVE-2013-4164, OSVDB-100113, URL-https://www.ruby-lang.org/en/news/2013/11/22/ruby-1-9-3-p484-is-released/

Description:
When Ruby attempts to convert a string representation of a large floating point
          decimal number to its floating point equivalent, a heap-based buffer overflow
          can be triggered. This module has been tested successfully on a Ruby on Rails application
          using Ruby version 1.9.3-p448 with WebRick and Thin web servers, where the Rails application
          crashes with a segfault error. Other versions of Ruby are reported to be affected.
Metasploit Module: F5 BigIP Access Policy Manager Session Exhaustion Denial of Service
Type: auxiliary
Path: modules/auxiliary/dos/http/f5_bigip_apm_max_sessions.rb
References: URL-https://support.f5.com/kb/en-us/products/big-ip_apm/releasenotes/product/relnote-apm-11-6-0.html

Description:
This module exploits a resource exhaustion denial of service in F5 BigIP devices. An
          unauthenticated attacker can establish multiple connections with BigIP Access Policy
          Manager (APM) and exhaust all available sessions defined in customer license. In the
          first step of the BigIP APM negotiation the client sends a HTTP request. The BigIP
          system creates a session, marks it as pending and then redirects the client to an access
          policy URI. Since BigIP allocates a new session after the first unauthenticated request,
          and deletes the session only if an access policy timeout expires, the attacker can exhaust
          all available sessions by repeatedly sending the initial HTTP request and leaving the
          sessions as pending.
Metasploit Module: Brother Debut http Denial Of Service
Type: auxiliary
Path: modules/auxiliary/dos/http/brother_debut_dos.rb
Disclosure date: 2017-11-02
References: CVE-2017-16249, URL-https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=18730

Description:
The Debut embedded HTTP server <= 1.20 on Brother printers allows for a Denial
          of Service (DoS) condition via a crafted HTTP request.  The printer will be
          unresponsive from HTTP and printing requests for ~300 seconds.  After which, the
          printer will start responding again.
Metasploit Module: Ruby WEBrick::HTTP::DefaultFileHandler DoS
Type: auxiliary
Path: modules/auxiliary/dos/http/webrick_regex.rb
Disclosure date: 2008-08-08
Authors: kris katterjohn
References: BID-30644, CVE-2008-3656, OSVDB-47471, URL-http://www.ruby-lang.org/en/news/2008/08/08/multiple-vulnerabilities-in-ruby/

Description:
The WEBrick::HTTP::DefaultFileHandler in WEBrick in
          Ruby 1.8.5 and earlier, 1.8.6 to 1.8.6-p286, 1.8.7
          to 1.8.7-p71, and 1.9 to r18423 allows for a DoS
          (CPU consumption) via a crafted HTTP request.
Metasploit Module: Hashtable Collisions
Type: auxiliary
Path: modules/auxiliary/dos/http/hashcollision_dos.rb
Disclosure date: 2011-12-28
References: URL-http://ocert.org/advisories/ocert-2011-003.html, URL-https://web.archive.org/web/[PII_REDACTED]1644/http://www.nruns.com/_downloads/advisory28122011.pdf, URL-https://fahrplan.events.ccc.de/congress/2011/Fahrplan/events/4680.en.html, URL-https://fahrplan.events.ccc.de/congress/2011/Fahrplan/attachments/2007_28C3_Effective_DoS_on_web_application_platforms.pdf, URL-https://www.youtube.com/watch?v=R2Cq3CLI6H8, CVE-2011-5034, CVE-2011-5035, CVE-2011-4885, CVE-2011-4858

Description:
This module uses a denial-of-service (DoS) condition appearing in a variety of
          programming languages. This vulnerability occurs when storing multiple values
          in a hash table and all values have the same hash value. This can cause a web server
          parsing the POST parameters issued with a request into a hash table to consume
          hours of CPU with a single HTTP request.

          Currently, only the hash functions for PHP and Java are implemented.
          This module was tested with PHP + httpd, Tomcat, Glassfish and Geronimo.
          It also generates a random payload to bypass some IDS signatures.
Metasploit Module: Tautulli v2.1.9 - Shutdown Denial of Service
Type: auxiliary
Path: modules/auxiliary/dos/http/tautulli_shutdown_exec.rb
Authors: Ismail Tasdelen
References: CVE-2019-19833, EDB-47785

Description:
Tautulli versions 2.1.9 and prior are vulnerable to denial of service via the /shutdown URL.
Metasploit Module: WebKitGTK+ WebKitFaviconDatabase DoS
Type: auxiliary
Path: modules/auxiliary/dos/http/webkitplus.rb
Disclosure date: 2018-06-03
References: EDB-44842, CVE-2018-11646, URL-https://bugs.webkit.org/show_bug.cgi?id=186164, URL-https://www.inputzero.io/2018/06/cve-2018-11646-webkit.html

Description:
This module exploits a vulnerability in WebKitFaviconDatabase when pageURL is unset.
          If successful, it could lead to application crash, resulting in denial of service.
Metasploit Module: Apache mod_isapi Dangling Pointer
Type: auxiliary
Path: modules/auxiliary/dos/http/apache_mod_isapi.rb
Disclosure date: 2010-03-05
References: CVE-2010-0425, OSVDB-62674, BID-38494, URL-https://bz.apache.org/bugzilla/show_bug.cgi?id=48509, URL-https://web.archive.org/web/[PII_REDACTED]2229/http://www.gossamer-threads.com/lists/apache/cvs/381537, URL-http://www.senseofsecurity.com.au/advisories/SOS-10-002, EDB-11650

Description:
This module triggers a use-after-free vulnerability in the Apache
          Software Foundation mod_isapi extension for versions 2.2.14 and earlier.
          In order to reach the vulnerable code, the target server must have an
          ISAPI module installed and configured.

          By making a request that terminates abnormally (either an aborted TCP
          connection or an unsatisfied chunked request), mod_isapi will unload the
          ISAPI extension. Later, if another request comes for that ISAPI module,
          previously obtained pointers will be used resulting in an access
          violation or potentially arbitrary code execution.

          Although arbitrary code execution is theoretically possible, a
          real-world method of invoking this consequence has not been proven. In
          order to do so, one would need to find a situation where a particular
          ISAPI module loads at an image base address that can be re-allocated by
          a remote attacker.

          Limited success was encountered using two separate ISAPI modules. In
          this scenario, a second ISAPI module was loaded into the same memory
          area as the previously unloaded module.
Metasploit Module: marked npm module "heading" ReDoS
Type: auxiliary
Path: modules/auxiliary/dos/http/marked_redos.rb
References: URL-https://blog.sonatype.com/cve-2017-17461-vulnerable-or-not

Description:
This module exploits a Regular Expression Denial of Service vulnerability
          in the npm module "marked". The vulnerable portion of code that this module
          targets is in the "heading" regular expression. Web applications that use
          "marked" for generating html from markdown are vulnerable. Versions up to
          0.4.0 are vulnerable.
Metasploit Module: NFR Agent Heap Overflow Vulnerability
Type: auxiliary
Path: modules/auxiliary/dos/http/novell_file_reporter_heap_bof.rb
Disclosure date: 2012-11-16
References: CVE-2012-4956, URL-https://www.rapid7.com/blog/post/2012/11/16/nfr-agent-buffer-vulnerabilites-cve-2012-4959/

Description:
This module exploits a heap overflow in NFRAgent.exe, a component of Novell
          File Reporter (NFR). The vulnerability occurs when handling requests of name "SRS",
          where NFRAgent.exe fails to generate a response in a secure way, copying user
          controlled data into a fixed-length buffer in the heap without bounds checking.
          This module has been tested against NFR Agent 1.0.4.3 (File Reporter 1.0.2).
Metasploit Module: Apache Commons FileUpload and Apache Tomcat DoS
Type: auxiliary
Path: modules/auxiliary/dos/http/apache_commons_fileupload_dos.rb
Disclosure date: 2014-02-06
References: CVE-2014-0050, URL-https://tomcat.apache.org/security-8.html, URL-https://tomcat.apache.org/security-7.html

Description:
This module triggers an infinite loop in Apache Commons FileUpload 1.0
          through 1.3 via a specially crafted Content-Type header.
          Apache Tomcat 7 and Apache Tomcat 8 use a copy of FileUpload to handle
          mime-multipart requests, therefore, Apache Tomcat 7.0.0 through 7.0.50
          and 8.0.0-RC1 through 8.0.1 are affected by this issue. Tomcat 6 also
          uses Commons FileUpload as part of the Manager application.
Metasploit Module: Ruby on Rails Action View MIME Memory Exhaustion
Type: auxiliary
Path: modules/auxiliary/dos/http/rails_action_view.rb
Disclosure date: 2013-12-04
References: CVE-2013-6414, OSVDB-100525, BID-64074, URL-https://seclists.org/oss-sec/2013/q4/400, URL-https://github.com/rails/rails/commit/bee3b7f9371d1e2ddcfe6eaff5dcb26c0a248068

Description:
This module exploits a Denial of Service (DoS) condition in Action View that requires
          a controller action. By sending a specially crafted content-type header to a Rails
          application, it is possible for it to store the invalid MIME type, and may eventually
          consume all memory if enough invalid MIMEs are given.

          Versions 3.0.0 and other later versions are affected, fixed in 4.0.2 and 3.2.16.
Metasploit Module: Apache Range Header DoS (Apache Killer)
Type: auxiliary
Path: modules/auxiliary/dos/http/apache_range_dos.rb
Disclosure date: 2011-08-19
References: BID-49303, CVE-2011-3192, EDB-17696, OSVDB-74721

Description:
The byterange filter in the Apache HTTP Server 2.0.x through 2.0.64, and 2.2.x
          through 2.2.19 allows remote attackers to cause a denial of service (memory and
          CPU consumption) via a Range header that expresses multiple overlapping ranges,
          exploit called "Apache Killer".
Metasploit Module: Apache Tomcat Transfer-Encoding Information Disclosure and DoS
Type: auxiliary
Path: modules/auxiliary/dos/http/apache_tomcat_transfer_encoding.rb
Disclosure date: 2010-07-09
References: CVE-2010-2227, OSVDB-66319, BID-41544

Description:
Apache Tomcat 5.5.0 through 5.5.29, 6.0.0 through 6.0.27, and 7.0.0 beta does not
          properly handle an invalid Transfer-Encoding header, which allows remote attackers
          to cause a denial of service (application outage) or obtain sensitive information
          via a crafted header that interferes with "recycling of a buffer."
Metasploit Module: MS15-034 HTTP Protocol Stack Request Handling Denial-of-Service
Type: auxiliary
Path: modules/auxiliary/dos/http/ms15_034_ulonglongadd.rb
References: CVE-2015-1635, MSB-MS15-034, URL-https://pastebin.com/ypURDPc4, URL-https://github.com/rapid7/metasploit-framework/pull/5150, URL-https://community.qualys.com/blogs/securitylabs/2015/04/20/ms15-034-analyze-and-remote-detection, URL-http://www.securitysift.com/an-analysis-of-ms15-034/

Description:
This module will check if scanned hosts are vulnerable to CVE-2015-1635 (MS15-034), a
          vulnerability in the HTTP protocol stack (HTTP.sys) that could result in arbitrary code
          execution. This module will try to cause a denial-of-service.
Metasploit Module: SAP SOAP EPS_DELETE_FILE File Deletion
Type: auxiliary
Path: modules/auxiliary/dos/sap/sap_soap_rfc_eps_delete_file.rb
References: OSVDB-74780, URL-http://dsecrg.com/pages/vul/show.php?id=331, URL-https://launchpad.support.sap.com/#/notes/1554030

Description:
This module abuses the SAP NetWeaver EPS_DELETE_FILE function, on the SAP SOAP
        RFC Service, to delete arbitrary files on the remote file system. The module can
        also be used to capture SMB hashes by using a fake SMB share as DIRNAME.
Metasploit Module: iOS Safari Denial of Service with CSS
Type: auxiliary
Path: modules/auxiliary/dos/apple_ios/webkit_backdrop_filter_blur.rb
Disclosure date: 2018-09-15
References: URL-https://twitter.com/pwnsdx/status/[PII_REDACTED]73595649, URL-http://web.archive.org/web/[PII_REDACTED]5501/https://gist.github.com/pwnsdx/ce64de2760996a6c432f06d612e33aea, URL-https://nbulischeck.github.io/apple-safari-crash

Description:
This module exploits a vulnerability in WebKit on Apple iOS.
          If successful, the device will restart after viewing the webpage.
Metasploit Module: MS06-019 Exchange MODPROP Heap Overflow
Type: auxiliary
Path: modules/auxiliary/dos/windows/smtp/ms06_019_exchange.rb
Disclosure date: 2004-11-12
References: BID-17908, CVE-2006-0027, MSB-MS06-019

Description:
This module triggers a heap overflow vulnerability in MS
          Exchange that occurs when multiple malformed MODPROP values
          occur in a VCAL request.
Metasploit Module: Appian Enterprise Business Suite 5.6 SP1 DoS
Type: auxiliary
Path: modules/auxiliary/dos/windows/appian/appian_bpm.rb
Disclosure date: 2007-12-17
References: CVE-2007-6509, OSVDB-39500, URL-http://archives.neohapsis.com/archives/fulldisclosure/2007-12/0440.html

Description:
This module exploits a denial of service flaw in the Appian
          Enterprise Business Suite service.
Metasploit Module: Microsoft Windows NAT Helper Denial of Service
Type: auxiliary
Path: modules/auxiliary/dos/windows/nat/nat_helper.rb
Disclosure date: 2006-10-26
References: OSVDB-30096, BID-20804, CVE-2006-5614

Description:
This module exploits a denial of service vulnerability
          within the Internet Connection Sharing service in
          Windows XP.
Metasploit Module: PacketTrap TFTP Server 2.2.5459.0 DoS
Type: auxiliary
Path: modules/auxiliary/dos/windows/tftp/pt360_write.rb
Disclosure date: 2008-10-29
Authors: kris katterjohn
References: CVE-2008-1311, OSVDB-42932, EDB-6863

Description:
The PacketTrap TFTP server version 2.2.5459.0 can be
          brought down by sending a special write request.
Metasploit Module: SolarWinds TFTP Server 10.4.0.10 Denial of Service
Type: auxiliary
Path: modules/auxiliary/dos/windows/tftp/solarwinds.rb
Disclosure date: 2010-05-21
Authors: Nullthreat
References: CVE-2010-2115, OSVDB-64845, EDB-12683

Description:
The SolarWinds TFTP server can be shut down by sending a 'netascii' read
          request with a specially crafted file name.
Metasploit Module: Microsoft Windows Browser Pool DoS
Type: auxiliary
Path: modules/auxiliary/dos/windows/smb/ms11_019_electbowser.rb
References: CVE-2011-0654, BID-46360, OSVDB-70881, MSB-MS11-019, EDB-16166, URL-https://seclists.org/fulldisclosure/2011/Feb/285

Description:
This module exploits a denial of service flaw in the Microsoft
          Windows SMB service on versions of Windows Server 2003 that have been
          configured as a domain controller. By sending a specially crafted election
          request, an attacker can cause a pool overflow.

          The vulnerability appears to be due to an error handling a length value
          while calculating the amount of memory to copy to a buffer. When there are
          zero bytes left in the buffer, the length value is improperly decremented
          and an integer underflow occurs. The resulting value is used in several
          calculations and is then passed as the length value to an inline memcpy
          operation.

          Unfortunately, the length value appears to be fixed at -2 (0xfffffffe) and
          causes considerable damage to kernel heap memory. While theoretically possible,
          it does not appear to be trivial to turn this vulnerability into remote (or
          even local) code execution.
Metasploit Module: Microsoft Plug and Play Service Registry Overflow
Type: auxiliary
Path: modules/auxiliary/dos/windows/smb/ms05_047_pnp.rb
References: CVE-2005-2120, MSB-MS05-047, BID-15065, OSVDB-18830

Description:
This module triggers a stack buffer overflow in the Windows Plug
          and Play service. This vulnerability can be exploited on
          Windows 2000 without a valid user account. Since the PnP
          service runs inside the service.exe process, this module
          will result in a forced reboot on Windows 2000. Obtaining
          code execution is possible if user-controlled memory can
          be placed at 0x00000030, 0x0030005C, or 0x005C005C.
Metasploit Module: Microsoft SRV.SYS WriteAndX Invalid DataOffset
Type: auxiliary
Path: modules/auxiliary/dos/windows/smb/ms09_001_write.rb
References: MSB-MS09-001, OSVDB-48153, CVE-2008-4114, BID-31179

Description:
This module exploits a denial of service vulnerability in the
          SRV.SYS driver of the Windows operating system.

          This module has been tested successfully against Windows Vista.
Metasploit Module: Microsoft SRV2.SYS SMB Negotiate ProcessID Function Table Dereference
Type: auxiliary
Path: modules/auxiliary/dos/windows/smb/ms09_050_smb2_negotiate_pidhigh.rb
References: CVE-2009-3103, BID-36299, OSVDB-57799, MSB-MS09-050, URL-https://seclists.org/fulldisclosure/2009/Sep/39

Description:
This module exploits an out of bounds function table dereference in the SMB
          request validation code of the SRV2.SYS driver included with Windows Vista, Windows 7
          release candidates (not RTM), and Windows 2008 Server prior to R2.  Windows	Vista
          without SP1 does not seem affected by this flaw.
Metasploit Module: Microsoft Windows 7 / Server 2008 R2 SMB Client Infinite Loop
Type: auxiliary
Path: modules/auxiliary/dos/windows/smb/ms10_006_negotiate_response_loop.rb
References: CVE-2010-0017, OSVDB-62244, MSB-MS10-006, URL-http://g-laurent.blogspot.com/2009/11/windows-7-server-2008r2-remote-kernel.html

Description:
This module exploits a denial of service flaw in the Microsoft
          Windows SMB client on Windows 7 and Windows Server 2008 R2. To trigger
          this bug, run this module as a service and forces a vulnerable client
          to access the IP of this system as an SMB server. This can be accomplished
          by embedding a UNC path (\HOST\share\something) into a web page if the
          target is using Internet Explorer, or a Word document otherwise.
Metasploit Module: Microsoft SRV.SYS Mailslot Write Corruption
Type: auxiliary
Path: modules/auxiliary/dos/windows/smb/ms06_035_mailslot.rb
Disclosure date: 2006-07-11
References: BID-19215, OSVDB-27644, CVE-2006-3942, URL-http://www.coresecurity.com/common/showdoc.php?idx=562&idxseccion=10, MSB-MS06-035

Description:
This module triggers a kernel pool corruption bug in SRV.SYS. Each
          call to the mailslot write function results in a two byte return value
          being written into the response packet. The code which creates this packet
          fails to consider these two bytes in the allocation routine, resulting in
          a slow corruption of the kernel memory pool. These two bytes are almost
          always set to "\xff\xff" (a short integer with value of -1).
Metasploit Module: Microsoft Vista SP0 SMB Negotiate Protocol DoS
Type: auxiliary
Path: modules/auxiliary/dos/windows/smb/vista_negotiate_stop.rb
References: OSVDB-64341

Description:
This module exploits a flaw in Windows Vista that allows a remote
          unauthenticated attacker to disable the SMB service. This vulnerability
          was silently fixed in Microsoft Vista Service Pack 1.