deardaniel/secdata-raw huggingface dataset:
Metasploit Module: Samba read_nttrans_ea_list Integer Overflow
Type: auxiliary
Path: modules/auxiliary/dos/samba/read_nttrans_ea_list.rb
References: OSVDB-95969, BID-61597, EDB-27778, CVE-2013-4124

Description:
Integer overflow in the read_nttrans_ea_list function in nttrans.c in
          smbd in Samba 3.x before 3.5.22, 3.6.x before 3.6.17, and 4.x before
          4.0.8 allows remote attackers to cause a denial of service (memory
          consumption) via a malformed packet. Important Note: in order to work,
          the "ea support" option on the target share must be enabled.
Metasploit Module: Samba lsa_io_privilege_set Heap Overflow
Type: auxiliary
Path: modules/auxiliary/dos/samba/lsa_addprivs_heap.rb
References: CVE-2007-2446, OSVDB-34699

Description:
This module triggers a heap overflow in the LSA RPC service
          of the Samba daemon.
Metasploit Module: Samba lsa_io_trans_names Heap Overflow
Type: auxiliary
Path: modules/auxiliary/dos/samba/lsa_transnames_heap.rb
References: CVE-2007-2446, OSVDB-34699

Description:
This module triggers a heap overflow in the LSA RPC service
          of the Samba daemon.
Metasploit Module: Android Stock Browser Iframe DOS
Type: auxiliary
Path: modules/auxiliary/dos/android/android_stock_browser_iframe.rb
Disclosure date: 2012-12-01
References: CVE-2012-6301

Description:
This module exploits a vulnerability in the native browser that comes with Android 4.0.3.
          If successful, the browser will crash after viewing the webpage.
Metasploit Module: MS02-063 PPTP Malformed Control Data Kernel Denial of Service
Type: auxiliary
Path: modules/auxiliary/dos/pptp/ms02_063_pptp_dos.rb
Disclosure date: 2002-09-26
References: BID-5807, CVE-2002-1214, OSVDB-13422, MSB-MS02-063

Description:
This module exploits a kernel based overflow when sending abnormal PPTP Control Data
          packets	to Microsoft Windows 2000 SP0-3 and XP SP0-1 based PPTP RAS servers
          (Remote Access Services). Kernel memory is overwritten resulting in a BSOD.
          Code execution may be possible however this module is only a DoS.
Metasploit Module: BIND TSIG Badtime Query Denial of Service
Type: auxiliary
Path: modules/auxiliary/dos/dns/bind_tsig_badtime.rb
Disclosure date: 2020-05-19
References: CVE-2020-8617, URL-https://gitlab.isc.org/isc-projects/bind9/-/issues/1703, URL-https://www.trapkit.de/advisories/TKADV2020-002.txt

Description:
A logic error in code which checks TSIG validity can be used to
          trigger an assertion failure in tsig.c.
Metasploit Module: BIND TKEY Query Denial of Service
Type: auxiliary
Path: modules/auxiliary/dos/dns/bind_tkey.rb
Disclosure date: 2015-07-28
References: CVE-2015-5477, URL-http://web.archive.org/web/[PII_REDACTED]4550/https://www.isc.org/blogs/cve-2015-5477-an-error-in-handling-tkey-queries-can-cause-named-to-exit-with-a-require-assertion-failure/, URL-https://kb.isc.org/article/AA-01272

Description:
This module sends a malformed TKEY query, which exploits an
          error in handling TKEY queries on affected BIND9 'named' DNS servers.
          As a result, a vulnerable named server will exit with a REQUIRE
          assertion failure. This condition can be exploited in versions of BIND
          between BIND 9.1.0 through 9.8.x, 9.9.0 through 9.9.7-P1 and 9.10.0
          through 9.10.2-P2.
Metasploit Module: BIND TSIG Query Denial of Service
Type: auxiliary
Path: modules/auxiliary/dos/dns/bind_tsig.rb
Disclosure date: 2016-09-27
References: CVE-2016-2776, URL-http://blog.infobytesec.com/2016/10/a-tale-of-dns-packet-cve-2016-2776.html

Description:
A defect in the rendering of messages into packets can cause named to
          exit with an assertion failure in buffer.c while constructing a response
          to a query that meets certain criteria.

          This assertion can be triggered even if the apparent source address
          isn't allowed to make queries.
Metasploit Module: IBM Lotus Sametime WebPlayer DoS
Type: auxiliary
Path: modules/auxiliary/dos/misc/ibm_sametime_webplayer_dos.rb
Disclosure date: 2013-11-07
References: CVE-2013-3986, OSVDB-99552, BID-63611, URL-http://www-01.ibm.com/support/docview.wss?uid=swg21654041, URL-http://xforce.iss.net/xforce/xfdb/84969

Description:
This module exploits a known flaw in the IBM Lotus Sametime WebPlayer
          version 8.5.2.1392 (and prior) to cause a denial of service condition
          against specific users. For this module to function the target user
          must be actively logged into the IBM Lotus Sametime server and have
          the Sametime Audio Visual browser plug-in (WebPlayer) loaded as a
          browser extension. The user should have the WebPlayer plug-in active
          (i.e. be in a Sametime Audio/Video meeting for this DoS to work correctly.
Metasploit Module: IBM Tivoli Storage Manager FastBack Server Opcode 0x534 Denial of Service
Type: auxiliary
Path: modules/auxiliary/dos/misc/ibm_tsm_dos.rb
Disclosure date: 2015-12-15
References: CVE-2015-1930, EDB-38979, OSVDB-132307

Description:
This module exploits a denial of service condition present in IBM Tivoli Storage Manager
          FastBack Server when dealing with packets triggering the opcode 0x534 handler.
Metasploit Module: Dopewars Denial of Service
Type: auxiliary
Path: modules/auxiliary/dos/misc/dopewars.rb
Disclosure date: 2009-10-05
References: CVE-2009-3591, OSVDB-58884, BID-36606

Description:
The jet command in Dopewars 1.5.12 is vulnerable to a segmentation fault due to
          a lack of input validation.
Metasploit Module: Memcached Remote Denial of Service
Type: auxiliary
Path: modules/auxiliary/dos/misc/memcached.rb
References: URL-https://code.google.com/archive/p/memcached/issues/192, CVE-2011-4971, OSVDB-92867

Description:
This module sends a specially-crafted packet to cause a
          segmentation fault in memcached v1.4.15 or earlier versions.
Metasploit Module: MiniUPnPd 1.4 Denial of Service (DoS) Exploit
Type: auxiliary
Path: modules/auxiliary/dos/upnp/miniupnpd_dos.rb
Disclosure date: 2013-03-27
References: CVE-2013-0229, OSVDB-89625, BID-57607, URL-https://www.rapid7.com/blog/post/2013/01/29/security-flaws-in-universal-plug-and-play-unplug-dont-play/, URL-https://www.hdm.io/writing/SecurityFlawsUPnP.pdf

Description:
This module allows remote attackers to cause a denial of service (DoS)
          in MiniUPnP 1.0 server via a specifically crafted UDP request.
Metasploit Module: NTP.org ntpd Reserved Mode Denial of Service
Type: auxiliary
Path: modules/auxiliary/dos/ntp/ntpd_reserved_dos.rb
Disclosure date: 2009-10-04
References: BID-37255, CVE-2009-3563, OSVDB-60847, URL-https://bugs.ntp.org/show_bug.cgi?id=1331

Description:
This module exploits a denial of service vulnerability
          within the NTP (network time protocol) demon. By sending
          a single packet to a vulnerable ntpd server (Victim A),
          spoofed from the IP address of another vulnerable ntpd server
          (Victim B), both victims will enter an infinite response loop.
          Note, unless you control the spoofed source host or the real
          remote host(s), you will not be able to halt the DoS condition
          once begun!
Metasploit Module: HP Data Protector Manager RDS DOS
Type: auxiliary
Path: modules/auxiliary/dos/hp/data_protector_rds.rb
Disclosure date: 2011-01-08
References: CVE-2011-0514, OSVDB-70617, EDB-15940

Description:
This module causes a remote DOS on HP Data Protector's RDS service.  By sending
          a malformed packet to port 1530, _rm32.dll causes RDS to crash due to an enormous
          size for malloc().
Metasploit Module: Wireshark chunked_encoding_dissector Function DOS
Type: auxiliary
Path: modules/auxiliary/dos/wireshark/chunked.rb
Disclosure date: 2007-02-22
Authors: Matteo Cantoni <goony[at]nothink.org>
References: CVE-2007-3389, OSVDB-37643, URL-https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1394

Description:
Wireshark crash when dissecting an HTTP chunked response.
          Versions affected: 0.99.5 (Bug 1394)
Metasploit Module: Wireshark CAPWAP Dissector DoS
Type: auxiliary
Path: modules/auxiliary/dos/wireshark/capwap.rb
Disclosure date: 2014-04-28
References: CVE-2013-4074, OSVDB-94091, BID-60500

Description:
This module injects a malformed UDP packet to crash Wireshark and TShark 1.8.0 to 1.8.7, as well
          as 1.6.0 to 1.6.15. The vulnerability exists in the CAPWAP dissector which fails to handle a
          packet correctly when an incorrect length is given.
Metasploit Module: Wireshark LDAP Dissector DOS
Type: auxiliary
Path: modules/auxiliary/dos/wireshark/ldap.rb
Disclosure date: Mar 28 2008
Authors: MC
References: CVE-2008-1562, OSVDB-43840

Description:
The LDAP dissector in Wireshark 0.99.2 through 0.99.8 allows remote attackers
        to cause a denial of service (application crash) via a malformed packet.
Metasploit Module: Wireshark CLDAP Dissector DOS
Type: auxiliary
Path: modules/auxiliary/dos/wireshark/cldap.rb
Disclosure date: 2011-03-01
Authors: joernchen <joernchen[at]phenoelit.de> (Phenoelit)
References: CVE-2011-1140, OSVDB-71552, URL-https://www.wireshark.org/security/wnpa-sec-2011-04.html, URL-https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5717

Description:
This module causes infinite recursion to occur within the
          CLDAP dissector by sending a specially crafted UDP packet.
Metasploit Module: OpenSSL DTLS ChangeCipherSpec Remote DoS
Type: auxiliary
Path: modules/auxiliary/dos/ssl/dtls_changecipherspec.rb
Disclosure date: 2000-04-26
References: CVE-2009-1386, OSVDB-55073

Description:
This module performs a Denial of Service Attack against Datagram TLS in OpenSSL
          version 0.9.8i and earlier. OpenSSL crashes under these versions when it receives a
          ChangeCipherspec Datagram before a ClientHello.
Metasploit Module: OpenSSL DTLS Fragment Buffer Overflow DoS
Type: auxiliary
Path: modules/auxiliary/dos/ssl/dtls_fragment_overflow.rb
Disclosure date: 2014-06-05
References: CVE-2014-0195, ZDI-14-173, BID-67900, URL-http://web.archive.org/web/[PII_REDACTED]4234/http://h30499.www3.hp.com/t5/HP-Security-Research-Blog/ZDI-14-173-CVE-2014-0195-OpenSSL-DTLS-Fragment-Out-of-Bounds/ba-p/6501002, URL-http://web.archive.org/web/[PII_REDACTED]0621/http://h30499.www3.hp.com/t5/HP-Security-Research-Blog/Once-Bled-Twice-Shy-OpenSSL-CVE-2014-0195/ba-p/6501048

Description:
This module performs a Denial of Service Attack against Datagram TLS in
          OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h.
          This occurs when a DTLS ClientHello message has multiple fragments and the
          fragment lengths of later fragments are larger than that of the first, a
          buffer overflow occurs, causing a DoS.
Metasploit Module: OpenSSL TLS 1.1 and 1.2 AES-NI DoS
Type: auxiliary
Path: modules/auxiliary/dos/ssl/openssl_aesni.rb
Disclosure date: 2013-02-05
References: CVE-2012-2686, URL-https://www.openssl.org/news/secadv/20130205.txt

Description:
The AES-NI implementation of OpenSSL 1.0.1c does not properly compute the
          length of an encrypted message when used with a TLS version 1.1 or above. This
          leads to an integer underflow which can cause a DoS. The vulnerable function
          aesni_cbc_hmac_sha1_cipher is only included in the 64-bit versions of OpenSSL.
          This module has been tested successfully on Ubuntu 12.04 (64-bit) with the default
          OpenSSL 1.0.1c package.
Metasploit Module: Avahi Source Port 0 DoS
Type: auxiliary
Path: modules/auxiliary/dos/mdns/avahi_portzero.rb
Disclosure date: Nov 14 2008
Authors: kris katterjohn
References: CVE-2008-5081, OSVDB-50929

Description:
Avahi-daemon versions prior to 0.6.24 can be DoS'd
        with an mDNS packet with a source port of 0.
Metasploit Module: Cisco IOS HTTP GET /%% Request Denial of Service
Type: auxiliary
Path: modules/auxiliary/dos/cisco/ios_http_percentpercent.rb
Disclosure date: 2000-04-26
References: BID-1154, CVE-2000-0380, OSVDB-1302

Description:
This module triggers a Denial of Service condition in the Cisco IOS
          HTTP server. By sending a GET request for "/%%", the device becomes
          unresponsive. IOS 11.1 -> 12.1 are reportedly vulnerable. This module
          tested successfully against a Cisco 1600 Router IOS v11.2(18)P.
Metasploit Module: Cisco IOS Telnet Denial of Service
Type: auxiliary
Path: modules/auxiliary/dos/cisco/ios_telnet_rocem.rb
Disclosure date: 2017-03-17
References: BID-96960, CVE-2017-3881, URL-https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170317-cmp, URL-https://artkond.com/2017/04/10/cisco-catalyst-remote-code-execution

Description:
This module triggers a Denial of Service condition in the Cisco IOS
          telnet service affecting multiple Cisco switches. Tested against Cisco
          Catalyst 2960 and 3750.
Metasploit Module: VSFTPD 2.3.2 Denial of Service
Type: auxiliary
Path: modules/auxiliary/dos/ftp/vsftpd_232.rb
Disclosure date: 2011-02-03
References: BID-46617, CVE-2011-0762, EDB-16270

Description:
This module triggers a Denial of Service condition in the VSFTPD server in
          versions before 2.3.3. So far, it has been tested on 2.3.0, 2.3.1, and 2.3.2.

Check method (fingerprinting):
# attempt to connect
    begin
      if !connect_login
        print_error('Connection refused.')
        return Exploit::CheckCode::Unknown('Failed to connect or authenticate via FTP')
      end
    rescue Rex::ConnectionRefused
      print_error('Connection refused.')
      return Exploit::CheckCode::Unknown('Connection refused by the target')
    rescue Rex::ConnectionTimeout
      print_error('Connection timed out')
      return Exploit::CheckCode::Unknown('Connection timed out')
    end
    s = ''
    loop do
      # get each line until our desired line shows or end line shows
      s = send_cmd(['STAT'], true)
      break if (s =~ /vsFTPd \d+\.\d+\.\d+/) || (s == "211 End of status\r\n")
    end
    disconnect
    # check if version was found
    if s !~ /vsFTPd \d+\.\d+\.\d+/
      print_error('Did not find FTP version in FTP session.')
      return Exploit::CheckCode::Unknown('Could not determine vsFTPd version')
    end

    # pull out version and check if its in range of vulnerability
    version = s[/\d+\.\d+\.\d+/]
    if Rex::Version.new(version) < Rex::Version.new('2.3.3')
      Exploit::CheckCode::Appears("vsFTPd #{version} is older than the patched version 2.3.3")
    else
      Exploit::CheckCode::Safe("vsFTPd #{version} is not vulnerable")
    end
  end
Metasploit Module: Mirage firewall for QubesOS 0.8.0-0.8.3 Denial of Service (DoS) Exploit
Type: auxiliary
Path: modules/auxiliary/dos/mirageos/qubes_mirage_firewall_dos.rb
Disclosure date: 2022-12-04
Authors: Krzysztof Burghardt <krzysztof@burghardt.pl>
References: CVE-2022-46770, URL-https://mirage.io/blog/MSA03, URL-https://github.com/mirage/qubes-mirage-firewall/issues/166

Description:
This module allows remote attackers to cause a denial of service (DoS)
          in Mirage firewall for QubesOS 0.8.0-0.8.3 via a specifically crafted UDP request.
Metasploit Module: ISC DHCP Zero Length ClientID Denial of Service Module
Type: auxiliary
Path: modules/auxiliary/dos/dhcp/isc_dhcpd_clientid.rb
References: CVE-2010-2156, OSVDB-65246, EDB-14185

Description:
This module performs a Denial of Service Attack against the ISC DHCP server,
        versions 4.1 before 4.1.1-P1 and 4.0 before 4.0.2-P1. It sends out a DHCP Request
        message with a 0-length client_id option for an IP address on the appropriate range
        for the dhcp server. When ISC DHCP Server tries to hash this value it exits
        abnormally.
Metasploit Module: Solaris LPD Arbitrary File Delete
Type: auxiliary
Path: modules/auxiliary/dos/solaris/lpd/cascade_delete.rb
References: CVE-2005-4797, BID-14510, OSVDB-18650

Description:
This module uses a vulnerability in the Solaris line printer
          daemon to delete arbitrary files on an affected system. This
          can be used to exploit the rpc.walld format string flaw, the
          missing krb5.conf authentication bypass, or simply delete
          system files. Tested on Solaris 2.6, 7, 8, 9, and 10.
Metasploit Module: Juniper JunOS Malformed TCP Option
Type: auxiliary
Path: modules/auxiliary/dos/tcp/junos_tcp_opt.rb
Authors: todb
References: BID-37670, OSVDB-61538, URL-http://praetorianprefect.com/archives/2010/01/junos-juniper-flaw-exposes-core-routers-to-kernal-crash/

Description:
This module exploits a denial of service vulnerability
        in Juniper Network's JunOS router operating system. By sending a TCP
        packet with TCP option 101 set, an attacker can cause an affected
        router to reboot.
Metasploit Module: SonicWALL SSL-VPN Format String Vulnerability
Type: auxiliary
Path: modules/auxiliary/dos/http/sonicwall_ssl_format.rb
Disclosure date: 2009-05-29
References: BID-35145, OSVDB-54881, URL-http://www.aushack.com/200905-sonicwall.txt

Description:
There is a format string vulnerability within the SonicWALL
          SSL-VPN Appliance - 200, 2000 and 4000 series. Arbitrary memory
          can be read or written to, depending on the format string used.
          There appears to be a length limit of 127 characters of format
          string data. With physical access to the device and debugging,
          this module may be able to be used to execute arbitrary code remotely.
Metasploit Module: Squid Proxy Range Header DoS
Type: auxiliary
Path: modules/auxiliary/dos/http/squid_range_dos.rb
Disclosure date: 2021-05-27
References: CVE-2021-31806, CVE-2021-31807, URL-https://blogs.opera.com/security/2021/10/fuzzing-http-proxies-squid-part-2/

Description:
The range handler in The Squid Caching Proxy Server 3.0-4.1.4 and
          5.0.1-5.0.5 suffers from multiple vulnerabilities triggered
          by specific HTTP requests and responses.

          These vulnerabilities allow remote attackers to cause a
          denial of service through specifically crafted requests.
Metasploit Module: IBM Notes Denial Of Service
Type: auxiliary
Path: modules/auxiliary/dos/http/ibm_lotus_notes2.rb
Disclosure date: 2017-08-31
References: EDB-42604, CVE-2017-1130

Description:
This module exploits a vulnerability in the native browser that comes with IBM Lotus Notes.
          If successful, the browser will crash after viewing the webpage.
Metasploit Module: "Cablehaunt" Cable Modem WebSocket DoS
Type: auxiliary
Path: modules/auxiliary/dos/http/cable_haunt_websocket_dos.rb
Disclosure date: 2020-01-07
References: CVE-2019-19494, EDB-47936, URL-https://cablehaunt.com/, URL-https://github.com/Lyrebirds/sagemcom-fast-3890-exploit

Description:
There exists a buffer overflow vulnerability in certain
          Cable Modem Spectrum Analyzer interfaces.  This overflow
          is exploitable, but since an exploit would differ between
          every make, model, and firmware version (which also
          differs from ISP to ISP), this module simply causes a
          Denial of Service to test if the vulnerability is present.
Metasploit Module: 3Com SuperStack Switch Denial of Service
Type: auxiliary
Path: modules/auxiliary/dos/http/3com_superstack_switch.rb
Disclosure date: 2004-06-24
References: OSVDB-7246, CVE-2004-2691, URL-http://support.3com.com/infodeli/tools/switches/dna1695-0aaa17.pdf

Description:
This module causes a temporary denial of service condition
          against 3Com SuperStack switches. By sending excessive data
          to the HTTP Management interface, the switch stops responding
          temporarily. The device does not reset. Tested successfully
          against a 3300SM firmware v2.66. Reported to affect versions
          prior to v2.72.
Metasploit Module: Node.js HTTP Pipelining Denial of Service
Type: auxiliary
Path: modules/auxiliary/dos/http/nodejs_pipelining.rb
Disclosure date: 2013-10-18
References: CVE-2013-4450, OSVDB-98724, BID-63229, URL-https://nodejs.org/ja/blog/vulnerability/http-server-pipeline-flood-dos/

Description:
This module exploits a Denial of Service (DoS) condition in the HTTP parser of Node.js versions
          released before 0.10.21 and 0.8.26. The attack sends many pipelined
          HTTP requests on a single connection, which causes unbounded memory
          allocation when the client does not read the responses.
Metasploit Module: Metasploit HTTP(S) handler DoS
Type: auxiliary
Path: modules/auxiliary/dos/http/metasploit_httphandler_dos.rb
Disclosure date: 2019-09-04
References: CVE-2019-5645

Description:
This module exploits the Metasploit HTTP(S) handler by sending
          a specially crafted HTTP request that gets added as a resource handler.
          Resources (which come from the external connections) are evaluated as RegEx
          in the handler server. Specially crafted input can trigger Gentle, Soft and Hard DoS.

          Tested against Metasploit 5.0.20.
Metasploit Module: Gzip Memory Bomb Denial Of Service
Type: auxiliary
Path: modules/auxiliary/dos/http/gzip_bomb_dos.rb
Disclosure date: 2004-01-01
References: URL-http://www.aerasec.de/security/advisories/decompression-bomb-vulnerability.html

Description:
This module generates and hosts a 10MB single-round gzip file that decompresses to 10GB.
          Many applications will not implement a length limit check and will eat up all memory and
          eventually die. This can also be used to kill systems that download/parse content from
          a user-provided URL (image-processing servers, AV, websites that accept zipped POST data, etc).

          A FILEPATH datastore option can also be provided to save the .gz bomb locally.

          Some clients (Firefox) will allow for multiple rounds of gzip. Most gzip utils will correctly
          deflate multiple rounds of gzip on a file. Setting ROUNDS=3 and SIZE=10240 (default value)
          will generate a 300 byte gzipped file that expands to 10GB.
Metasploit Module: Monkey HTTPD Header Parsing Denial of Service (DoS)
Type: auxiliary
Path: modules/auxiliary/dos/http/monkey_headers.rb
Disclosure date: 2013-05-30
References: CVE-2013-3843, OSVDB-93853, BID-60333

Description:
This module causes improper header parsing that leads to a segmentation fault
          due to a specially crafted HTTP request. Affects version <= 1.2.0.
Metasploit Module: ws - Denial of Service
Type: auxiliary
Path: modules/auxiliary/dos/http/ws_dos.rb
References: CVE-2016-10542, URL-https://nodesecurity.io/advisories/550

Description:
This module exploits a Denial of Service vulnerability in npm module "ws".
        By sending a specially crafted value of the Sec-WebSocket-Extensions header on the initial WebSocket upgrade request, the ws component will crash.
Metasploit Module: WordPress Traversal Directory DoS
Type: auxiliary
Path: modules/auxiliary/dos/http/wordpress_directory_traversal_dos.rb
References: CVE-2016-6897, EDB-40288

Description:
Cross-site request forgery (CSRF) vulnerability in the wp_ajax_update_plugin
          function in wp-admin/includes/ajax-actions.php in WordPress before 4.6
          allows remote attackers to hijack the authentication of subscribers
          for /dev/random read operations by leveraging a late call to
          the check_ajax_referer function, a related issue to CVE-2016-6896.