Please contact me @sehacure otherwise i am going to disclose in Full disclosure mailing list :p

How it was found

I found all these issues in MS-DOS. Please increase the reward amount. Then i will report :D :D

Best regards, Anand