What’s Vulnerable › Vulnerabilities

CVE-2019-25628: Download Accelerator Plus DAP 10.0.6.0 SEH Buffer Overflow

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-03-24 · updated 2026-06-17
• Weakness: CWE-787

Description

Download Accelerator Plus DAP 10.0.6.0 contains a structured exception handler buffer overflow vulnerability that allows remote attackers to execute arbitrary code by crafting malicious URLs. Attackers can create specially crafted URLs with overflowing buffer data that overwrites SEH pointers and executes embedded shellcode when imported through the application's web page import functionality.

Affected products

• Speedbit Download Accelerator Plus DAP: 10.0.6.0 #

References

• http://www.speedbit.com/dap/
• http://www.speedbit.com/dap/download/downloading.asp
• https://www.exploit-db.com/exploits/46673
• https://www.vulncheck.com/advisories/download-accelerator-plus-dap-seh-buffer-overflow

Get alerted when CVE-2019-25628 or the next vulnerability affects your stack