CVE-2019-18655

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

File Sharing Wizard version 1.5.0 build 2008 is affected by a Structured Exception Handler based buffer overflow vulnerability. An unauthenticated attacker is able to perform remote command execution and obtain a command shell by sending a HTTP GET request including the malicious payload in the URL. A similar issue to CVE-2019-17415, CVE-2019-16724, and CVE-2010-2331.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://0xhuesca.com/cve-2019-18655.htmlExploit, Third Party Advisory
https://github.com/0xhuesca/CVE-2019-18655/blob/main/filesharing_wizard_get_bof.rb
https://www.0xhuesca.com/2019/11/cve-2019-18655.htmlExploit, Third Party Advisory
http://0xhuesca.com/cve-2019-18655.htmlExploit, Third Party Advisory
https://www.0xhuesca.com/2019/11/cve-2019-18655.htmlExploit, Third Party Advisory

Timeline

Published: Nov 12, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-186566.1Pimcore 6.2.3 has XSS in the translations grid because bundles/AdminBundle/Resources/public/js/pimcore/settings/translations.js mishandles c CVE-2019-186575.3ClickHouse before 19.13.5.44 allows HTTP header injection via the url table function.CVE-2019-186589.8In Helm 2.x before 2.15.2, commands that deal with loading a chart as a directory or packaging a chart provide an opportunity for a maliciou CVE-2019-186595.3The Wireless Emergency Alerts (WEA) protocol allows remote attackers to spoof a Presidential Alert because cryptographic authentication is n CVE-2019-18663.7Cisco Webex Business Suite before 39.1.0 contains a vulnerability that could allow an unauthenticated, remote attacker to affect the integri CVE-2019-186604.7The Linux kernel before 5.4.1 on powerpc allows Information Exposure because the Spectre-RSB mitigation is not in place for all applicable C CVE-2019-186617.5Fastweb FASTGate 1.0.1b devices allow partial authentication bypass by changing a certain check_pwd return value from 0 to 1. An attack does CVE-2019-186629.8An issue was discovered in YouPHPTube through 7.7. User input passed through the live_stream_code POST parameter to /plugin/LiveChat/getChat CVE-2019-186639.8A SQL injection vulnerability in a /login/forgot1 POST request in ARP-GUARD 4.0.0-5 allows unauthenticated remote attackers to execute arbit CVE-2019-186645.4The Log module in SECUDOS DOMOS before 5.6 allows XSS.CVE-2019-186657.5The Log module in SECUDOS DOMOS before 5.6 allows local file inclusion.CVE-2019-186669.8An issue was discovered on D-Link DAP-1360 revision F devices. Remote attackers can start a telnet service without authorization via an undo