🔐 CVE Alert

CVE-2019-25628

CRITICAL 9.8

Download Accelerator Plus DAP 10.0.6.0 SEH Buffer Overflow

CVSS Score
9.8
EPSS Score
0.2%
EPSS Percentile
38th

Download Accelerator Plus DAP 10.0.6.0 contains a structured exception handler buffer overflow vulnerability that allows remote attackers to execute arbitrary code by crafting malicious URLs. Attackers can create specially crafted URLs with overflowing buffer data that overwrites SEH pointers and executes embedded shellcode when imported through the application's web page import functionality.

CWE CWE-787
Vendor speedbit
Product download accelerator plus dap
Published Mar 24, 2026
Last Updated Mar 24, 2026
Stay Ahead of the Next One

Get instant alerts for speedbit download accelerator plus dap

Be the first to know when new critical vulnerabilities affecting speedbit download accelerator plus dap are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Affected Versions

Speedbit / Download Accelerator Plus DAP
10.0.6.0 #

References

NVD ↗ CVE.org ↗ EPSS Data ↗
exploit-db.com: https://www.exploit-db.com/exploits/46673 speedbit.com: http://www.speedbit.com/dap/ speedbit.com: http://www.speedbit.com/dap/download/downloading.asp vulncheck.com: https://www.vulncheck.com/advisories/download-accelerator-plus-dap-seh-buffer-overflow

Credits

Peyman Forouzan #