deardaniel/secdata-raw huggingface dataset:
Metasploit Module: MS09-072 Microsoft Internet Explorer Style getElementsByTagName Memory Corruption
Type: exploit
Path: modules/exploits/windows/browser/ms09_072_style_object.rb
Platform: win
Disclosure date: 2009-11-20
References: MSB-MS09-072, CVE-2009-3672, OSVDB-50622, BID-37085, URL-https://web.archive.org/web/[PII_REDACTED]1713/http://taossa.com/archive/bh08sotirovdowd.pdf

Description:
This module exploits a vulnerability in the getElementsByTagName function
          as implemented within Internet Explorer.
Metasploit Module: Apple QuickTime 7.1.3 RTSP URI Buffer Overflow
Type: exploit
Path: modules/exploits/windows/browser/apple_quicktime_rtsp.rb
Platform: win
Disclosure date: 2007-01-01
References: CVE-2007-0015, OSVDB-31023, BID-21829

Description:
This module exploits a buffer overflow in Apple QuickTime
          7.1.3. This module was inspired by MOAB-01-01-2007.  The
          Browser target for this module was tested against IE 6 and
          Firefox 1.5.0.3 on Windows XP SP0/2; Firefox 3 blacklists the
          QuickTime plugin.
Metasploit Module: Java CMM Remote Code Execution
Type: exploit
Path: modules/exploits/windows/browser/java_cmm.rb
Platform: java
Disclosure date: 2013-03-01
References: CVE-2013-1493, OSVDB-90737, BID-58238, URL-https://blogs.oracle.com/security/entry/security_alert_cve_2013_1493, URL-http://www.oracle.com/technetwork/topics/security/alert-cve-2013-[PII_REDACTED].html, URL-http://web.archive.org/web/[PII_REDACTED]2610/http://pastie.org/pastes/6581034
Targets: Generic (Java Payload), Windows x86 (Native Payload)

Description:
This module abuses the Color Management classes from a Java Applet to run
          arbitrary Java code outside of the sandbox as exploited in the wild in February
          and March of 2013. The vulnerability affects Java version 7u15 and earlier and 6u41
          and earlier and has been tested successfully on Windows XP SP3 and Windows 7 SP1
          systems. This exploit doesn't bypass click-to-play, so the user must accept the java
          warning in order to run the malicious applet.
Metasploit Module: SoftArtisans XFile FileManager ActiveX Control Buffer Overflow
Type: exploit
Path: modules/exploits/windows/browser/softartisans_getdrivename.rb
Platform: win
Disclosure date: 2008-08-25
References: CVE-2007-1682, OSVDB-47794, US-CERT-VU-914785, BID-30826

Description:
This module exploits a stack buffer overflow in SoftArtisans XFile FileManager ActiveX control
          (SAFmgPwd.dll 2.0.5.3). When sending an overly long string to the GetDriveName() method
          an attacker may be able to execute arbitrary code.
Metasploit Module: CA BrightStor Discovery Service TCP Overflow
Type: exploit
Path: modules/exploits/windows/brightstor/discovery_tcp.rb
Platform: win
Disclosure date: 2005-02-14
References: CVE-2005-2535, OSVDB-13814, BID-12536, URL-http://archives.neohapsis.com/archives/bugtraq/2005-02/0123.html, EDB-1131

Description:
This module exploits a vulnerability in the CA BrightStor
          Discovery Service. This vulnerability occurs when a specific
          type of request is sent to the TCP listener on port 41523.
          This vulnerability was discovered by cybertronic[at]gmx.net
          and affects all known versions of the BrightStor product.
          This module is based on the 'cabrightstor_disco' exploit by
          HD Moore.

Check method (fingerprinting):
# The first request should have no reply
    csock = Rex::Socket::Tcp.create(
      'PeerHost' => datastore['RHOST'],
      'PeerPort' => datastore['RPORT'],
      'Context' =>
        {
          'Msf' => framework,
          'MsfExploit' => self
        }
    )

    csock.put('META')
    x = csock.get_once(-1, 3)
    csock.close

    # The second request should be replied with the host name
    csock = Rex::Socket::Tcp.create(
      'PeerHost' => datastore['RHOST'],
      'PeerPort' => datastore['RPORT'],
      'Context' =>
        {
          'Msf' => framework,
          'MsfExploit' => self
        }
    )

    csock.put('hMETA')
    y = csock.get_once(-1, 3)
    csock.close

    if (y and !x)
      return Exploit::CheckCode::Detected('BrightStor Discovery Service responded on TCP')
    end

    return Exploit::CheckCode::Safe('BrightStor Discovery Service not detected on TCP')
  end
Metasploit Module: CA BrightStor ARCserve for Laptops and Desktops LGServer rxsSetDataGrowthScheduleAndFilter Buffer Overflow
Type: exploit
Path: modules/exploits/windows/brightstor/lgserver_rxssetdatagrowthscheduleandfilter.rb
Platform: win
Disclosure date: 2007-06-06
References: CVE-2007-3216, OSVDB-35329, BID-24348

Description:
This module exploits a stack buffer overflow in Computer Associates BrightStor ARCserve Backup
          for Laptops & Desktops 11.1. By sending a specially crafted request (rxsSetDataGrowthScheduleAndFilter),
          an attacker could overflow the buffer and execute arbitrary code.

Check method (fingerprinting):
connect

    sock.put("[PII_REDACTED]rxrGetServerVersion")
    ver = sock.get_once

    disconnect

    if (ver and ver =~ /11\.1\.742/)
      return Exploit::CheckCode::Appears('BrightStor ARCserve version 11.1.742 detected')
    end

    return Exploit::CheckCode::Safe('BrightStor ARCserve version 11.1.742 not detected')
  end
Metasploit Module: CA BrightStor ARCserve for Laptops and Desktops LGServer Multiple Commands Buffer Overflow
Type: exploit
Path: modules/exploits/windows/brightstor/lgserver_multi.rb
Platform: win
Disclosure date: 2007-06-06
References: CVE-2007-3216, OSVDB-35329, BID-24348

Description:
This module exploits a stack buffer overflow in Computer Associates BrightStor ARCserve Backup
          for Laptops & Desktops 11.1. By sending a specially crafted request to multiple commands,
          an attacker could overflow the buffer and execute arbitrary code.

Check method (fingerprinting):
connect

    sock.put("[PII_REDACTED]rxrGetServerVersion")
    ver = sock.get_once

    disconnect

    if (ver and ver =~ /11\.1\.742/)
      return Exploit::CheckCode::Appears('BrightStor ARCserve version 11.1.742 detected')
    end

    return Exploit::CheckCode::Safe('BrightStor ARCserve version 11.1.742 not detected')
  end
Metasploit Module: CA BrightStor ARCserve Tape Engine Buffer Overflow
Type: exploit
Path: modules/exploits/windows/brightstor/tape_engine.rb
Platform: win
Disclosure date: 2006-11-21
References: CVE-2006-6076, OSVDB-30637, BID-21221, EDB-3086

Description:
This module exploits a stack buffer overflow in Computer Associates BrightStor ARCserve Backup
          r11.1 - r11.5. By sending a specially crafted DCERPC request, an attacker could overflow
          the buffer and execute arbitrary code.
Metasploit Module: CA BrightStor ARCserve Message Engine 0x72 Buffer Overflow
Type: exploit
Path: modules/exploits/windows/brightstor/message_engine_72.rb
Platform: win
Disclosure date: 2010-10-04
References: OSVDB-68329, URL-http://www.metasploit.com/users/mc

Description:
This module exploits a buffer overflow in Computer Associates BrightStor ARCserve Backup
          11.1 - 11.5 SP2. By sending a specially crafted RPC request, an attacker could overflow
          the buffer and execute arbitrary code.
Metasploit Module: Computer Associates ARCserve REPORTREMOTEEXECUTECML Buffer Overflow
Type: exploit
Path: modules/exploits/windows/brightstor/ca_arcserve_342.rb
Platform: win
Disclosure date: 2008-10-09
References: BID-31684, OSVDB-49468, CVE-2008-4397, URL-http://crackinglandia.blogspot.com/2009/10/el-colador-de-ca-computer-associates.html

Description:
This module exploits a buffer overflow in Computer Associates BrightStor ARCserve r11.5 (build 3884).
          By sending a specially crafted RPC request to opcode 0x342, an attacker could overflow the buffer
          and execute arbitrary code. In order to successfully exploit this vulnerability, you will need
          set the hostname argument (HNAME).
Metasploit Module: CA BrightStor ARCserve Message Engine Buffer Overflow
Type: exploit
Path: modules/exploits/windows/brightstor/message_engine.rb
Platform: win
Disclosure date: 2007-01-11
References: CVE-2007-0169, OSVDB-31318, BID-22005

Description:
This module exploits a buffer overflow in Computer Associates BrightStor ARCserve Backup
          11.1 - 11.5 SP2. By sending a specially crafted RPC request, an attacker could overflow
          the buffer and execute arbitrary code.
Metasploit Module: CA BrightStor ARCserve Tape Engine 0x8A Buffer Overflow
Type: exploit
Path: modules/exploits/windows/brightstor/tape_engine_0x8a.rb
Platform: win
Disclosure date: 2010-10-04
References: CVE-2006-6076, OSVDB-68330, URL-http://www.metasploit.com/users/mc

Description:
This module exploits a stack buffer overflow in Computer Associates BrightStor ARCserve Backup
          r11.1 - r11.5. By sending a specially crafted DCERPC request, an attacker could overflow
          the buffer and execute arbitrary code.
Metasploit Module: CA BrightStor Discovery Service Stack Buffer Overflow
Type: exploit
Path: modules/exploits/windows/brightstor/discovery_udp.rb
Platform: win
Disclosure date: 2004-12-20
References: CVE-2005-0260, OSVDB-13613, BID-12491, URL-http://www.idefense.com/application/poi/display?id=194&type=vulnerabilities

Description:
This module exploits a vulnerability in the CA BrightStor
          Discovery Service. This vulnerability occurs when a large
          request is sent to UDP port 41524, triggering a stack buffer
          overflow.

Check method (fingerprinting):
# The first request should have no reply
    csock = Rex::Socket::Tcp.create(
      'PeerHost' => datastore['RHOST'],
      'PeerPort' => 41523,
      'Context' =>
        {
          'Msf' => framework,
          'MsfExploit' => self
        }
    )

    csock.put('META')
    x = csock.get_once(-1, 3)
    csock.close

    # The second request should be replied with the host name
    csock = Rex::Socket::Tcp.create(
      'PeerHost' => datastore['RHOST'],
      'PeerPort' => 41523,
      'Context' =>
        {
          'Msf' => framework,
          'MsfExploit' => self
        }
    )

    csock.put('hMETA')
    y = csock.get_once(-1, 3)
    csock.close

    if (y and !x)
      return Exploit::CheckCode::Detected('BrightStor Discovery Service responded on UDP')
    end

    return Exploit::CheckCode::Safe('BrightStor Discovery Service not detected on UDP')
  end
Metasploit Module: Computer Associates Alert Notification Buffer Overflow
Type: exploit
Path: modules/exploits/windows/brightstor/etrust_itm_alert.rb
Platform: win
Disclosure date: 2008-04-04
References: CVE-2007-4620, OSVDB-44040, BID-28605

Description:
This module exploits a buffer overflow in Computer Associates Threat Manager for the Enterprise r8.1
          By sending a specially crafted RPC request, an attacker could overflow the buffer and execute arbitrary code.
          In order to successfully exploit this vulnerability, you will need valid logon credentials to the target.
Metasploit Module: CA BrightStor HSM Buffer Overflow
Type: exploit
Path: modules/exploits/windows/brightstor/hsmserver.rb
Platform: win
Disclosure date: 2007-09-27
References: CVE-2007-5082, OSVDB-41363, BID-25823

Description:
This module exploits one of the multiple stack buffer overflows in Computer Associates BrightStor HSM.
          By sending a specially crafted request, an attacker could overflow the buffer and execute arbitrary code.
Metasploit Module: CA BrightStor ARCserve for Laptops and Desktops LGServer Buffer Overflow
Type: exploit
Path: modules/exploits/windows/brightstor/lgserver_rxrlogin.rb
Platform: win
Disclosure date: 2007-06-06
References: CVE-2007-5003, OSVDB-41353, BID-24348

Description:
This module exploits a stack buffer overflow in Computer Associates BrightStor ARCserve Backup
          for Laptops & Desktops 11.1. By sending a specially crafted request, an attacker could
          overflow the buffer and execute arbitrary code.

Check method (fingerprinting):
connect

    sock.put("[PII_REDACTED]rxrGetServerVersion")
    ver = sock.get_once

    disconnect

    if (ver and ver =~ /11\.1\.742/)
      return Exploit::CheckCode::Appears('BrightStor ARCserve version 11.1.742 detected')
    end

    return Exploit::CheckCode::Safe('BrightStor ARCserve version 11.1.742 not detected')
  end
Metasploit Module: CA BrightStor ARCserve License Service GCR NETWORK Buffer Overflow
Type: exploit
Path: modules/exploits/windows/brightstor/license_gcr.rb
Platform: win
Disclosure date: 2005-03-02
References: CVE-2005-0581, OSVDB-14389, BID-12705

Description:
This module exploits a stack buffer overflow in Computer Associates BrightStor ARCserve Backup 11.0.
          By sending a specially crafted request to the lic98rmtd.exe service, an attacker
          could overflow the buffer and execute arbitrary code.
Metasploit Module: CA BrightStor Universal Agent Overflow
Type: exploit
Path: modules/exploits/windows/brightstor/universal_agent.rb
Platform: win
Disclosure date: 2005-04-11
References: CVE-2005-1018, OSVDB-15471, BID-13102, URL-http://www.idefense.com/application/poi/display?id=232&type=vulnerabilities

Description:
This module exploits a convoluted heap overflow in the CA
          BrightStor Universal Agent service. Triple userland
          exception results in heap growth and execution of
          dereferenced function pointer at a specified address.
Metasploit Module: CA BrightStor ArcServe Media Service Stack Buffer Overflow
Type: exploit
Path: modules/exploits/windows/brightstor/mediasrv_sunrpc.rb
Platform: win
Disclosure date: 2007-04-25
References: CVE-2007-2139, OSVDB-35326, BID-23635, ZDI-07-022

Description:
This exploit targets a stack buffer overflow in the MediaSrv RPC service of CA
          BrightStor ARCserve. By sending a specially crafted SUNRPC request, an attacker
          can overflow a stack buffer and execute arbitrary code.
Metasploit Module: CA BrightStor ARCserve for Laptops and Desktops LGServer Buffer Overflow
Type: exploit
Path: modules/exploits/windows/brightstor/lgserver.rb
Platform: win
Disclosure date: 2007-01-31
References: CVE-2007-0449, OSVDB-31593, BID-22342

Description:
This module exploits a stack buffer overflow in Computer Associates BrightStor ARCserve Backup
          for Laptops & Desktops 11.1. By sending a specially crafted request, an attacker could
          overflow the buffer and execute arbitrary code.
Metasploit Module: CA BrightStor Agent for Microsoft SQL Overflow
Type: exploit
Path: modules/exploits/windows/brightstor/sql_agent.rb
Platform: win
Disclosure date: 2005-08-02
References: CVE-2005-1272, OSVDB-18501, BID-14453, URL-http://www.idefense.com/application/poi/display?id=287&type=vulnerabilities, URL-http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=33239

Description:
This module exploits a vulnerability in the CA BrightStor
          Agent for Microsoft SQL Server. This vulnerability was
          discovered by cybertronic[at]gmx.net.
Metasploit Module: CA BrightStor ARCserve Message Engine Heap Overflow
Type: exploit
Path: modules/exploits/windows/brightstor/message_engine_heap.rb
Platform: win
Disclosure date: 2006-10-05
References: CVE-2006-5143, OSVDB-29533, BID-20365

Description:
This module exploits a heap overflow in Computer Associates BrightStor ARCserve Backup
          11.5. By sending a specially crafted RPC request, an attacker could overflow the
          buffer and execute arbitrary code.
Metasploit Module: CA BrightStor ARCserve for Laptops and Desktops LGServer Buffer Overflow
Type: exploit
Path: modules/exploits/windows/brightstor/lgserver_rxsuselicenseini.rb
Platform: win
Disclosure date: 2007-06-06
References: CVE-2007-3216, OSVDB-35329, BID-24348

Description:
This module exploits a stack buffer overflow in Computer Associates BrightStor ARCserve Backup
          for Laptops & Desktops 11.1. By sending a specially crafted request (rxsUseLicenseIni), an
          attacker could overflow the buffer and execute arbitrary code.

Check method (fingerprinting):
connect

    sock.put("[PII_REDACTED]rxrGetServerVersion")
    ver = sock.get_once

    disconnect

    if (ver and ver =~ /11\.1\.742/)
      return Exploit::CheckCode::Appears('BrightStor ARCserve version 11.1.742 detected')
    end

    return Exploit::CheckCode::Safe('BrightStor ARCserve version 11.1.742 not detected')
  end
Metasploit Module: Racer v0.5.3 Beta 5 Buffer Overflow
Type: exploit
Path: modules/exploits/windows/games/racer_503beta5.rb
Platform: win
Disclosure date: 2008-08-10
References: CVE-2007-4370, OSVDB-39601, EDB-4283, BID-25297

Description:
This module exploits the Racer Car and Racing Simulator game
          versions v0.5.3 beta 5 and earlier. Both the client and server listen
          on UDP port 26000. By sending an overly long buffer we are able to
          execute arbitrary code remotely.
Metasploit Module: Medal of Honor Allied Assault getinfo Stack Buffer Overflow
Type: exploit
Path: modules/exploits/windows/games/mohaa_getinfo.rb
Platform: win
Disclosure date: 2004-07-17
References: CVE-2004-0735, OSVDB-8061, EDB-357, BID-10743

Description:
This module exploits a stack based buffer overflow in the getinfo
          command of Medal Of Honor Allied Assault.
Metasploit Module: Unreal Tournament 2004 "secure" Overflow (Win32)
Type: exploit
Path: modules/exploits/windows/games/ut2004_secure.rb
Platform: win
Disclosure date: 2004-06-18
References: CVE-2004-0608, OSVDB-7217, BID-10570

Description:
This is an exploit for the GameSpy secure query in
          the Unreal Engine.

          This exploit only requires one UDP packet, which can
          be both spoofed and sent to a broadcast address.
          Usually, the GameSpy query server listens on port 7787,
          but you can manually specify the port as well.

          The RunServer.sh script will automatically restart the
          server upon a crash, giving us the ability to
          bruteforce the service and exploit it multiple
          times.

Check method (fingerprinting):
vers = ut_version

    if (not vers)
      print_status("Could not detect Unreal Tournament Server")
      return
    end

    vprint_status("Detected Unreal Tournament Server Version: #{vers}")
    if (vers =~ /^(3120|3186|3204)$/)
      vprint_status("This system appears to be exploitable")
      return Exploit::CheckCode::Appears("Unreal Tournament Server version #{vers} appears vulnerable")
    end

    if (vers =~ /^(2...)$/)
      vprint_status("This system appears to be running UT2003")
      return Exploit::CheckCode::Detected("Unreal Tournament 2003 detected, version #{vers}")
    end

    vprint_status("This system appears to be patched")
    return Exploit::CheckCode::Safe("Unreal Tournament Server version #{vers} appears patched")
  end
Metasploit Module: Novell ZENworks Configuration Management Preboot Service 0x6c Buffer Overflow
Type: exploit
Path: modules/exploits/windows/novell/zenworks_preboot_op6c_bof.rb
Platform: win
Disclosure date: 2012-02-22
References: CVE-2011-3175, OSVDB-80231, BID-52659, URL-http://www.verisigninc.com/en_US/products-and-services/network-intelligence-availability/idefense/public-vulnerability-reports/articles/index.xhtml?id=973

Description:
This module exploits a remote buffer overflow in the ZENworks Configuration
          Management. The vulnerability exists in the Preboot service and can be triggered by
          sending a specially crafted packet with the opcode 0x6c (PROXY_CMD_GET_NEXT_STEP)
          to port 998/TCP. The module has been successfully tested on Novell ZENworks
          Configuration Management 10 SP2 / SP3 and Windows Server 2003 SP2 (DEP bypass).
Metasploit Module: Novell ZENworks Configuration Management Preboot Service 0x21 Buffer Overflow
Type: exploit
Path: modules/exploits/windows/novell/zenworks_preboot_op21_bof.rb
Platform: win
Disclosure date: 2010-03-30
References: CVE-2012-2215, OSVDB-65361, BID-40486, ZDI-10-090, URL-http://www.novell.com/support/kb/doc.php?id=7005572

Description:
This module exploits a remote buffer overflow in the ZENworks Configuration
          Management 10 SP2. The vulnerability exists in the Preboot service and can be
          triggered by sending a specially crafted packet with the opcode 0x21
          (PROXY_CMD_FTP_FILE) to port 998/TCP. The module has been successfully tested on
          Novell ZENworks Configuration Management 10 SP2 and Windows Server 2003 SP2
          (DEP bypass).
Metasploit Module: NFR Agent FSFUI Record File Upload RCE
Type: exploit
Path: modules/exploits/windows/novell/file_reporter_fsfui_upload.rb
Platform: win
Disclosure date: 2012-11-16
References: CVE-2012-4959, OSVDB-87573, URL-https://www.rapid7.com/blog/post/2012/11/16/nfr-agent-buffer-vulnerabilites-cve-2012-4959

Description:
NFRAgent.exe, a component of Novell File Reporter (NFR), allows remote attackers to upload
          arbitrary files via a directory traversal while handling requests to /FSF/CMD with
          FSFUI records with UICMD 130. This module has been tested successfully against NFR
          Agent 1.0.4.3 (File Reporter 1.0.2) and NFR Agent 1.0.3.22 (File Reporter 1.0.1).
Metasploit Module: NetIQ Privileged User Manager 2.3.1 ldapagnt_eval() Remote Perl Code Execution
Type: exploit
Path: modules/exploits/windows/novell/netiq_pum_eval.rb
Platform: win
Disclosure date: 2012-11-15
References: CVE-2012-5932, OSVDB-87334, BID-56539, EDB-22738

Description:
This module abuses a lack of authorization in the NetIQ Privileged User Manager
          service (unifid.exe) to execute arbitrary perl code. The problem exists in the
          ldapagnt module. The module has been tested successfully on NetIQ PUM 2.3.1 over
          Windows 2003 SP2, which allows to execute arbitrary code with SYSTEM privileges.

Check method (fingerprinting):
data = fake_login

    print_status("Sending fake login request...")

    res = send_request_cgi(
      {
        'uri' => '/',
        'version' => '1.1',
        'method' => 'POST',
        'ctype' => "application/x-amf",
        'headers' => {
          "x-flash-version" => "11,4,402,278"
        },
        'data' => data,
      }
    )

    if res and res.body =~ /onResult/ and res.body =~ /Invalid user name or password/ and res.body =~ /2\.3\.1/
      return Exploit::CheckCode::Appears('NetIQ Privileged User Manager version 2.3.1 detected')
    elsif res and res.body =~ /onResult/ and res.body =~ /Invalid user name or password/
      return Exploit::CheckCode::Detected('NetIQ Privileged User Manager detected')
    end

    return Exploit::CheckCode::Safe('NetIQ Privileged User Manager not detected')
  end
Metasploit Module: Novell NetMail NMAP STOR Buffer Overflow
Type: exploit
Path: modules/exploits/windows/novell/nmap_stor.rb
Platform: win
Disclosure date: 2006-12-23
References: CVE-2006-6424, OSVDB-31363, BID-21725

Description:
This module exploits a stack buffer overflow in Novell's Netmail 3.52 NMAP STOR
          verb. By sending an overly long string, an attacker can overwrite the
          buffer and control program execution.
Metasploit Module: Novell GroupWise Messenger Client Buffer Overflow
Type: exploit
Path: modules/exploits/windows/novell/groupwisemessenger_client.rb
Platform: win
Disclosure date: 2008-07-02
Authors: MC
References: CVE-2008-2703, OSVDB-46041, BID-29602, URL-http://www.infobyte.com.ar/adv/ISR-17.html

Description:
This module exploits a stack buffer overflow in Novell's GroupWise Messenger Client.
          By sending a specially crafted HTTP response, an attacker may be able to execute
          arbitrary code.