deardaniel/secdata-raw huggingface dataset:
Metasploit Module: MediaCoder .M3U Buffer Overflow
Type: exploit
Path: modules/exploits/windows/fileformat/mediacoder_m3u.rb
Platform: win
Disclosure date: 2013-06-24
References: CVE-2017-8869, OSVDB-94522, EDB-26403

Description:
This module exploits a buffer overflow in MediaCoder 0.8.22. The vulnerability
          occurs when adding an .m3u, allowing arbitrary code execution under the context
          of the user. DEP bypass via ROP is supported on Windows 7, since the MediaCoder
          runs with DEP. This module has been tested successfully on MediaCoder 0.8.21.5539
          to 0.8.22.5530 over Windows XP SP3 and Windows 7 SP0.
Metasploit Module: Xenorate 2.50 (.xpl) Universal Local Buffer Overflow (SEH)
Type: exploit
Path: modules/exploits/windows/fileformat/xenorate_xpl_bof.rb
Platform: win
Disclosure date: 2009-08-19
References: CVE-2009-20003, OSVDB-57162, EDB-10371

Description:
This module exploits a stack buffer overflow in Xenorate 2.50
          by creating a specially crafted xpl file.
Metasploit Module: Nitro Pro PDF Reader 11.0.3.173 Javascript API Remote Code Execution
Type: exploit
Path: modules/exploits/windows/fileformat/nitro_reader_jsapi.rb
Platform: win
Disclosure date: 2017-07-24
References: CVE-2017-7442, URL-http://srcincite.io/advisories/src-2017-0005/, URL-https://blogs.securiteam.com/index.php/archives/3251

Description:
This module exploits an unsafe Javascript API implemented in Nitro and Nitro Pro
          PDF Reader version 11. The saveAs() Javascript API function allows for writing
          arbitrary files to the file system. Additionally, the launchURL() function allows
          an attacker to execute local files on the file system and bypass the security dialog

          Note: This is 100% reliable.
Metasploit Module: CA eTrust PestPatrol ActiveX Control Buffer Overflow
Type: exploit
Path: modules/exploits/windows/fileformat/etrust_pestscan.rb
Platform: win
Disclosure date: 2009-11-02
References: CVE-2009-4225, OSVDB-60862

Description:
This module exploits a stack buffer overflow in CA eTrust PestPatrol. When
          sending an overly long string to the Initialize() property of ppctl.dll (5.6.7.9)
          an attacker may be able to execute arbitrary code.
Metasploit Module: AudioCoder .M3U Buffer Overflow
Type: exploit
Path: modules/exploits/windows/fileformat/audio_coder_m3u.rb
Platform: win
Disclosure date: 2013-05-01
References: CVE-2017-8870, OSVDB-92939, EDB-25141

Description:
This module exploits a buffer overflow in AudioCoder 0.8.18. The vulnerability
          occurs when adding an .m3u, allowing arbitrary code execution with the privileges
          of the user running AudioCoder. This module has been tested successfully on
          AudioCoder 0.8.18.5353 over Windows XP SP3 and Windows 7 SP1.
Metasploit Module: VLC Media Player MKV Use After Free
Type: exploit
Path: modules/exploits/windows/fileformat/vlc_mkv.rb
Platform: win
Disclosure date: 2018-05-24
References: CVE-2018-11529, EDB-44979
Targets: VLC 2.2.8 on Windows 10 x86, VLC 2.2.8 on Windows 10 x64

Description:
This module exploits a use after free vulnerability in
          VideoLAN VLC =< 2.2.8. The vulnerability exists in the parsing of
          MKV files and affects both 32 bits and 64 bits.

          In order to exploit this, this module will generate two files:
          The first .mkv file contains the main vulnerability and heap spray,
          the second .mkv file is required in order to take the vulnerable code
          path and should be placed under the same directory as the .mkv file.

          This module has been tested against VLC v2.2.8. Tested with payloads
          windows/exec, windows/x64/exec, windows/shell/reverse_tcp,
          windows/x64/shell/reverse_tcp. Meterpreter payloads if used can
          cause the application to crash instead.
Metasploit Module: i-FTP Schedule Buffer Overflow
Type: exploit
Path: modules/exploits/windows/fileformat/iftp_schedule_bof.rb
Platform: win
Disclosure date: 2014-11-06
References: CVE-2014-125114, EDB-35177, OSVDB-114279

Description:
This module exploits a stack-based buffer overflow vulnerability in
          i-Ftp v2.20, caused by a long time value set for scheduled download.

          By persuading the victim to place a specially-crafted Schedule.xml file
          in the i-FTP folder, a remote attacker could execute arbitrary code on
          the system or cause the application to crash. This module has been
          tested successfully on Windows XP SP3.
Metasploit Module: Publish-It PUI Buffer Overflow (SEH)
Type: exploit
Path: modules/exploits/windows/fileformat/publishit_pui.rb
Platform: win
Disclosure date: 2014-02-05
References: OSVDB-102911, CVE-2014-0980, EDB-31461

Description:
This module exploits a stack based buffer overflow in Publish-It when
          processing a specially crafted .PUI file. This vulnerability could be
          exploited by a remote attacker to execute arbitrary code on the target
          machine by enticing a user of Publish-It to open a malicious .PUI file.
Metasploit Module: AOL Desktop 9.6 RTX Buffer Overflow
Type: exploit
Path: modules/exploits/windows/fileformat/aol_desktop_linktag.rb
Platform: win
Disclosure date: 2011-01-31
Authors: mr_me <steventhomasseeley[at]gmail.com>, silent_dream
References: CVE-2011-10027, OSVDB-70741, EDB-16085

Description:
This module exploits a vulnerability found in AOL Desktop 9.6's Tool\rich.rct
          component. By supplying a long string of data in the hyperlink tag, rich.rct copies
          this data into a buffer using a strcpy function, which causes an overflow, and
          results arbitrary code execution.
Metasploit Module: HTML Help Workshop 4.74 (hhp Project File) Buffer Overflow
Type: exploit
Path: modules/exploits/windows/fileformat/hhw_hhp_indexfile_bof.rb
Platform: win
Disclosure date: 2009-01-17
References: CVE-2009-0133, BID-33189, OSVDB-22941, EDB-10323, EDB-10335

Description:
This module exploits a stack buffer overflow in HTML Help Workshop 4.74
          by creating a specially crafted hhp file.
Metasploit Module: BS.Player 2.57 Buffer Overflow (Unicode SEH)
Type: exploit
Path: modules/exploits/windows/fileformat/bsplayer_m3u.rb
Platform: win
Disclosure date: 2010-01-07
References: CVE-2010-10016, OSVDB-82528, EDB-15934

Description:
This module exploits a buffer overflow in BS.Player 2.57. When
          the playlist import is used to import a specially crafted m3u file,
          a buffer overflow occurs allowing arbitrary code execution.
Metasploit Module: DVD X Player 5.5 .plf PlayList Buffer Overflow
Type: exploit
Path: modules/exploits/windows/fileformat/dvdx_plf_bof.rb
Platform: win
Disclosure date: 2007-06-02
References: CVE-2007-3068, OSVDB-36956, BID-24278, EDB-17745

Description:
This module exploits a stack-based buffer overflow on DVD X Player 5.5 Pro and
          Standard.  By supplying a long string of data in a plf file (playlist), the
          MediaPlayerCtrl.dll component will attempt to extract a filename out of the string,
          and then copy it on the stack without any proper bounds checking, which causes a
          buffer overflow, and results in arbitrary code execution under the context of the user.

          This module has been designed to target common Windows systems such as:
          Windows XP SP2/SP3, Windows Vista, and Windows 7.
Metasploit Module: Easy CD-DA Recorder PLS Buffer Overflow
Type: exploit
Path: modules/exploits/windows/fileformat/easycdda_pls_bof.rb
Platform: win
Disclosure date: 2010-06-07
References: BID-40631, EDB-13761, OSVDB-65256, CVE-2010-2343, URL-http://www.corelan.be:8800/advisories.php?id=CORELAN-10-048

Description:
This module exploits a stack-based buffer overflow vulnerability in
          Easy CD-DA Recorder 2007 caused by an overlong string in a playlist entry.
          By persuading the victim to open a specially-crafted PLS file, a
          remote attacker can execute arbitrary code on the system or cause
          the application to crash. This module has been tested successfully on
          Windows XP SP3 and Windows 7 SP1.
Metasploit Module: Adobe CoolType SING Table "uniqueName" Stack Buffer Overflow
Type: exploit
Path: modules/exploits/windows/fileformat/adobe_cooltype_sing.rb
Platform: win
Disclosure date: 2010-09-07
References: CVE-2010-2883, OSVDB-67849, URL-http://contagiodump.blogspot.com/2010/09/cve-david-leadbetters-one-point-lesson.html, URL-http://www.adobe.com/support/security/advisories/apsa10-02.html

Description:
This module exploits a vulnerability in the Smart INdependent Glyplets (SING) table
          handling within versions 8.2.4 and 9.3.4 of Adobe Reader. Prior versions are
          assumed to be vulnerable as well.
Metasploit Module: UltraISO CCD File Parsing Buffer Overflow
Type: exploit
Path: modules/exploits/windows/fileformat/ultraiso_ccd.rb
Platform: win
Disclosure date: 2009-04-03
References: CVE-2009-1260, OSVDB-53275, BID-34363, BID-38613, EDB-8343

Description:
This module exploits a stack-based buffer overflow in EZB Systems, Inc's
          UltraISO. When processing .CCD files, data is read from file into a
          fixed-size stack buffer. Since no bounds checking is done, a buffer overflow
          can occur. Attackers can execute arbitrary code by convincing their victim
          to open an CCD file.

          NOTE: A file with the same base name, but the extension of "img" must also
          exist. Opening either file will trigger the vulnerability, but the files must
          both exist.
Metasploit Module: Microsoft Office Word Malicious MSHTML RCE
Type: exploit
Path: modules/exploits/windows/fileformat/word_mshtml_rce.rb
Platform: win
Disclosure date: 2021-09-23
References: CVE-2021-40444, URL-https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-40444, URL-https://www.sentinelone.com/blog/peeking-into-cve-2021-40444-ms-office-zero-day-vulnerability-exploited-in-the-wild/, URL-https://download.microsoft.com/download/4/d/a/4da14f27-b4ef-4170-a6e6-5b1ef85b1baa/%5Bms-cab%5D.pdf, URL-https://github.com/lockedbyte/CVE-2021-40444/blob/master/REPRODUCE.md, URL-https://github.com/klezVirus/CVE-2021-40444

Description:
This module creates a malicious docx file that when opened in Word on a vulnerable Windows
          system will lead to code execution. This vulnerability exists because an attacker can
          craft a malicious ActiveX control to be used by a Microsoft Office document that hosts
          the browser rendering engine.
Metasploit Module: Adobe PDF Escape EXE Social Engineering (No JavaScript)
Type: exploit
Path: modules/exploits/windows/fileformat/adobe_pdf_embedded_exe_nojs.rb
Platform: win
Disclosure date: 2010-03-29
References: CVE-2010-1240, OSVDB-63667, URL-http://blog.didierstevens.com/2010/04/06/update-escape-from-pdf/, URL-http://blog.didierstevens.com/2010/03/31/escape-from-foxit-reader/, URL-http://blog.didierstevens.com/2010/03/29/escape-from-pdf/, URL-http://www.adobe.com/support/security/bulletins/apsb10-15.html

Description:
This module embeds a Metasploit payload into an existing PDF file in
          a non-standard method. The resulting PDF can be sent to a target as
          part of a social engineering attack.
Metasploit Module: Lattice Semiconductor PAC-Designer 6.21 Symbol Value Buffer Overflow
Type: exploit
Path: modules/exploits/windows/fileformat/lattice_pac_bof.rb
Platform: win
Disclosure date: 2012-05-16
References: CVE-2012-2915, OSVDB-82001, EDB-19006, BID-53566, URL-http://web.archive.org/web/[PII_REDACTED]5252/http://secunia.com:80/advisories/48741

Description:
This module exploits a vulnerability found in Lattice Semiconductor PAC-Designer
          6.21.  As a .pac file, when supplying a long string of data to the 'value' field
          under the 'SymbolicSchematicData' tag, it is possible to cause a memory corruption
          on the stack, which results in arbitrary code execution under the context of the
          user.
Metasploit Module: Microsoft Works 7 WkImgSrv.dll WKsPictureInterface() ActiveX Code Execution
Type: exploit
Path: modules/exploits/windows/fileformat/msworks_wkspictureinterface.rb
Platform: win
Disclosure date: 2008-11-28
References: CVE-2008-1898, OSVDB-44458

Description:
The Microsoft Works ActiveX control (WkImgSrv.dll) could allow a remote attacker
          to execute arbitrary code on a system. By passing a negative integer to the
          WksPictureInterface method, an attacker could execute arbitrary code on the system
          with privileges of the victim. Change 168430090 /0X0A0A0A0A to 202116108 / 0x0C0C0C0C FOR IE6.
          This control is not marked safe for scripting, please choose your attack vector carefully.
Metasploit Module: Themebleed- Windows 11 Themes Arbitrary Code Execution CVE-2023-38146
Type: exploit
Path: modules/exploits/windows/fileformat/theme_dll_hijack_cve_2023_38146.rb
Platform: win
Disclosure date: 2023-09-13
References: CVE-2023-38146, URL-https://exploits.forsale/themebleed/, URL-https://github.com/gabe-k/themebleed/tree/main

Description:
When an unpatched Windows 11 host loads a theme file referencing an msstyles file, Windows loads the
          msstyles file, and if that file's PACKME_VERSION is `999`, it then attempts to load an accompanying dll
          file ending in `_vrf.dll` Before loading that file, it verifies that the file is signed.  It does this by
          opening the file for reading and verifying the signature before opening the file for execution.
          Because this action is performed in two discrete operations, it opens the procedure for a time of check to
          time of use vulnerability.  By embedding a UNC file path to an SMB server we control, the SMB server can
          serve a legitimate, signed dll when queried for the read, but then serve a different file of the same name
          when the host intends to load/execute the dll.
Metasploit Module: Aviosoft Digital TV Player Professional 1.0 Stack Buffer Overflow
Type: exploit
Path: modules/exploits/windows/fileformat/aviosoft_plf_buf.rb
Platform: win
Disclosure date: 2011-11-09
References: CVE-2011-4496, OSVDB-77043, EDB-18096

Description:
This module exploits a vulnerability found in Aviosoft Digital TV Player
          Pro version 1.x.  An overflow occurs when the process copies the content of a
          playlist file on to the stack, which may result arbitrary code execution under
          the context of the user.
Metasploit Module: Wireshark packet-dect.c Stack Buffer Overflow (local)
Type: exploit
Path: modules/exploits/windows/fileformat/wireshark_packet_dect.rb
Platform: win
Disclosure date: 2011-04-18
References: CVE-2011-1591, OSVDB-71848, URL-https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5838, URL-https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5836, EDB-17185

Description:
This module exploits a stack buffer overflow in Wireshark <= 1.4.4
          When opening a malicious .pcap file in Wireshark, a stack buffer occurs,
          resulting in arbitrary code execution.

          Note: To exploit the vulnerability remotely with Scapy: sendp(rdpcap("file")).
Metasploit Module: Adobe U3D CLODProgressiveMeshDeclaration Array Overrun
Type: exploit
Path: modules/exploits/windows/fileformat/adobe_u3d_meshdecl.rb
Platform: win
Disclosure date: 2009-10-13
References: CVE-2009-3953, OSVDB-61690, URL-http://www.adobe.com/support/security/bulletins/apsb10-02.html

Description:
This module exploits an array overflow in Adobe Reader and Adobe Acrobat.
          Affected versions include < 7.1.4, < 8.2, and < 9.3. By creating a
          specially crafted pdf that a contains malformed U3D data, an attacker may
          be able to execute arbitrary code.
Metasploit Module: MS13-071 Microsoft Windows Theme File Handling Arbitrary Code Execution
Type: exploit
Path: modules/exploits/windows/fileformat/ms13_071_theme.rb
Platform: win
Disclosure date: 2013-09-10
References: CVE-2013-0810, OSVDB-97136, MSB-MS13-071, BID-62176, URL-http://www.verisigninc.com/en_US/products-and-services/network-intelligence-availability/idefense/public-vulnerability-reports/articles/index.xhtml?id=1040, URL-https://www.rapid7.com/blog/post/2013/09/25/change-the-theme-get-a-shell

Description:
This module exploits a vulnerability mainly affecting Microsoft Windows XP and Windows
          2003. The vulnerability exists in the handling of the Screen Saver path, in the [boot]
          section. An arbitrary path can be used as screen saver, including a remote SMB resource,
          which allows for remote code execution when a malicious .theme file is opened, and the
          "Screen Saver" tab is viewed. The code execution is also triggered if the victim installs
          the malicious theme and stays away from the computer, when Windows tries to display the
          screensaver.
Metasploit Module: IBM Forms Viewer Unicode Buffer Overflow
Type: exploit
Path: modules/exploits/windows/fileformat/ibm_forms_viewer_fontname.rb
Platform: win
Disclosure date: 2013-12-05
References: CVE-2013-5447, OSVDB-100732, ZDI-13-274, URL-http://www-01.ibm.com/support/docview.wss?uid=swg21657500

Description:
This module exploits a stack-based buffer overflow in IBM Forms Viewer. The vulnerability
          is due to a dangerous usage of a strcpy-like function, and occurs while parsing malformed
          XFDL files containing a long fontname value. This module has been tested successfully on IBM
          Forms Viewer 4.0 on Windows XP SP3 and Windows 7 SP1.
Metasploit Module: Foxit PDF Reader Pointer Overwrite UAF
Type: exploit
Path: modules/exploits/windows/fileformat/foxit_reader_uaf.rb
Platform: win
Disclosure date: 2018-04-20
References: CVE-2018-9948, CVE-2018-9958, ZDI-18-332, ZDI-18-342, URL-https://srcincite.io/blog/2018/06/22/foxes-among-us-foxit-reader-vulnerability-discovery-and-exploitation.html, URL-https://srcincite.io/pocs/cve-2018-99%7B48,58%7D.pdf.txt

Description:
Foxit PDF Reader v9.0.1.1049 has a Use-After-Free vulnerability
          in the Text Annotations component and the TypedArray's use
          uninitialized pointers.

          The vulnerabilities can be combined to leak a vtable memory address,
          which can be adjusted to point to the base address of the executable.
          A ROP chain can be constructed that will execute when Foxit Reader
          performs the UAF.

          This module has been tested on Windows 7 x64, Windows 10 Pro x64
          Build 17134, and Windows 10 Enterprise x64. Windows 10 Enterprise
          must have insecure logons enabled for the exploit to work as expected.
Metasploit Module: Destiny Media Player 1.61 PLS M3U Buffer Overflow
Type: exploit
Path: modules/exploits/windows/fileformat/destinymediaplayer16.rb
Platform: win
Disclosure date: 2009-01-03
References: CVE-2009-3429, OSVDB-53249, EDB-7651, BID-33091

Description:
This module exploits a stack-based buffer overflow in the Destiny Media Player 1.61.
          An attacker must send the file to victim and the victim must open the file. File-->Open Playlist
Metasploit Module: NetOp Remote Control Client 9.5 Buffer Overflow
Type: exploit
Path: modules/exploits/windows/fileformat/netop.rb
Platform: win
Disclosure date: 2011-04-28
References: CVE-2011-10012, OSVDB-72291, EDB-17223

Description:
This module exploits a stack-based buffer overflow in NetOp Remote Control 9.5.
          When opening a .dws file containing a specially crafted string longer then 520
          characters will allow an attacker to execute arbitrary code.
Metasploit Module: HTML Help Workshop 4.74 (hhp Project File) Buffer Overflow
Type: exploit
Path: modules/exploits/windows/fileformat/hhw_hhp_compiledfile_bof.rb
Platform: win
Disclosure date: 2006-02-06
References: CVE-2006-0564, OSVDB-22941, EDB-1488, EDB-1490

Description:
This module exploits a stack buffer overflow in HTML Help Workshop 4.74
          By creating a specially crafted hhp file, an attacker may be able
          to execute arbitrary code.
Metasploit Module: VeryTools Video Spirit Pro
Type: exploit
Path: modules/exploits/windows/fileformat/videospirit_visprj.rb
Platform: win
Disclosure date: 2011-04-11
References: CVE-2011-0499, CVE-2011-0500, OSVDB-70619, URL-http://www.corelan.be/advisories.php?id=CORELAN-11-001

Description:
This module exploits a stack buffer overflow in Video Spirit <= 1.70.
          When opening a malicious project file (.visprj), a stack buffer overflow occurs,
          resulting in arbitrary code execution.
          This exploit bypasses DEP & ASLR, and works on XP, Vista & Windows 7.
Metasploit Module: Beetel Connection Manager NetConfig.ini Buffer Overflow
Type: exploit
Path: modules/exploits/windows/fileformat/beetel_netconfig_ini_bof.rb
Platform: "win"
References: CVE-2013-10036

Description:
This module exploits a stack-based buffer overflow in Beetel Connection
          Manager. The vulnerability exists in the parsing of the UserName
          parameter in the NetConfig.ini file.

          The module has been tested successfully against version
          PCW_BTLINDV1.0.0B04 on Windows XP SP3 and Windows 7 SP1.
Metasploit Module: ABBS Audio Media Player .LST Buffer Overflow
Type: exploit
Path: modules/exploits/windows/fileformat/abbs_amp_lst.rb
Platform: win
Disclosure date: 2013-06-30
References: CVE-2019-5621 , OSVDB-75096, EDB-25204

Description:
This module exploits a buffer overflow in ABBS Audio Media Player. The vulnerability
          occurs when adding a specially crafted .lst file, allowing arbitrary code execution with the privileges
          of the user running the application. This module has been tested successfully on
          ABBS Audio Media Player 3.1 over Windows XP SP3 and Windows 7 SP1.
Metasploit Module: Photodex ProShow Producer 5.0.3256 load File Handling Buffer Overflow
Type: exploit
Path: modules/exploits/windows/fileformat/proshow_load_bof.rb
Platform: win
Disclosure date: 2012-06-06
References: CVE-2012-10051, OSVDB-83745, EDB-19563, EDB-20036, URL-http://security.inshell.net/advisory/30

Description:
This module exploits a stack-based buffer overflow in Photodex ProShow Producer
          v5.0.3256 in the handling of the plugins load list file. An attacker must send the
          crafted "load" file to victim, who must store it in the installation directory. The
          vulnerability will be triggered the next time ProShow is opened. The module has been
          tested successfully on Windows XP SP3 and Windows 7 SP1.
Metasploit Module: VUPlayer CUE Buffer Overflow
Type: exploit
Path: modules/exploits/windows/fileformat/vuplayer_cue.rb
Platform: win
Disclosure date: 2009-08-18
References: CVE-2009-0182, OSVDB-64581, BID-33960

Description:
This module exploits a stack based overflow in VUPlayer <= 2.49. When
          the application is used to open a specially crafted cue file, a buffer is overwritten allowing
          for the execution of arbitrary code.
Metasploit Module: VariCAD 2010-2.05 EN (DWB File) Stack Buffer Overflow
Type: exploit
Path: modules/exploits/windows/fileformat/varicad_dwb.rb
Platform: win
Disclosure date: 2010-03-17
References: CVE-2010-20114, OSVDB-63067, BID-38815, EDB-11789

Description:
This module exploits a stack-based buffer overflow in VariCAD 2010-2.05 EN.
          An attacker must send the file to victim and the victim must open the file.
Metasploit Module: Microsoft Office DDE Payload Delivery
Type: exploit
Path: modules/exploits/windows/fileformat/office_dde_delivery.rb
Platform: win
Disclosure date: 2017-10-09
Authors: mumbai
References: URL-https://gist.github.com/xillwillx/171c24c8e23512a891910824f506f563, URL-https://sensepost.com/blog/2017/macro-less-code-exec-in-msword/

Description:
This module generates an DDE command to place within
          a word document, that when executed, will retrieve a HTA payload
          via HTTP from an web server.