First day on Intigriti: our agent harness found and proved a remote code execution bug, paid €3,000.

CVE-2019-25619

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

FTP Shell Server 6.83 contains a buffer overflow vulnerability in the 'Account name to ban' field that allows local attackers to execute arbitrary code by supplying a crafted string. Attackers can inject shellcode through the account name parameter in the Manage FTP Accounts dialog to overwrite the return address and execute calc.exe or other commands.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

Affected software

No affected versions have been published.

Timeline

Published: Mar 22, 2026
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2019

CVE-2019-256205.5Tree Studio 2.17 contains a denial of service vulnerability that allows local attackers to crash the application by providing malformed inpu CVE-2019-256215.5Pixel Studio 2.17 contains a denial of service vulnerability that allows local attackers to crash the application by providing malformed inp CVE-2019-256225.5Paint Studio 2.17 contains a denial of service vulnerability that allows local attackers to crash the application by providing malformed inp CVE-2019-256235.5Luminance Studio 2.17 contains a denial of service vulnerability that allows local attackers to crash the application by providing malformed CVE-2019-256245.5Liquid Studio 2.17 contains a denial of service vulnerability that allows local attackers to crash the application by providing malformed in CVE-2019-256255.5Blob Studio 2.17 contains a denial of service vulnerability that allows local attackers to crash the application by providing malformed inpu CVE-2019-256267.8River Past Cam Do 3.7.6 contains a local buffer overflow vulnerability in the activation code input field that allows local attackers to exe CVE-2019-256277.8FlexHEX 2.71 contains a local buffer overflow vulnerability in the Stream Name field that allows local attackers to execute arbitrary code b CVE-2019-256289.8Download Accelerator Plus DAP 10.0.6.0 contains a structured exception handler buffer overflow vulnerability that allows remote attackers to CVE-2019-256297.8AIDA64 Extreme 5.99.4900 contains a structured exception handler buffer overflow vulnerability in the logging functionality that allows loca CVE-2019-256308.8PhreeBooks ERP 5.2.3 contains an arbitrary file upload vulnerability in the Image Manager component that allows authenticated attackers to u CVE-2019-256317.8AIDA64 Business 5.99.4900 contains a structured exception handling buffer overflow vulnerability that allows local attackers to execute arbi

CVE-2019-25619: High severity, CVSS 7.8 | Vulnix