CHANGING
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| ServiSign Windows versions | 3 | – | Feb 3, 2020 |
| Syuan-Gu-Da-Shih | 3 | – | Feb 4, 2020 |
| IDExpert Windows Logon Agent | 2 | – | Mar 2, 2026 |
| Mobile One Time Password | 2 | – | Jul 1, 2024 |
| Clinic Image System | 2 | – | Aug 29, 2025 |
| TSA | 1 | – | Aug 29, 2025 |
| MOTP(Mobile One Time Password) | 1 | – | Dec 29, 2021 |
| CGServiSign | 1 | – | Sep 23, 2026 |
Exploited and recent CVEs
- CVE-2026-15027 Changing|CGServiSign - OS Command Injection 3.2%
- CVE-2026-3000 Changing|IDExpert Windows Logon Agent - Remote Code Execution 0.6%
- CVE-2026-2999 Changing|IDExpert Windows Logon Agent - Remote Code Execution 0.6%
- CVE-2025-8858 Changing|Clinic Image System - SQL Injection 0.4%
- CVE-2025-8857 Changing|Clinic Image System - Use of Hard-coded Credentials 0.5%
- CVE-2025-8861 Changing|TSA - Missing Authentication 0.5%
- CVE-2024-3123 CHANGING Mobile One Time Password - Arbitrary File Upload 0.6%
- CVE-2024-3122 CHANGING Mobile One Time Password - Arbitrary File Reading 0.6%
- CVE-2021-44161 Changing Information Technology Inc. MOTP(Mobile One Time Password) - SQL Injection 0.5%
- CVE-2020-3939 SysJust Syuan-Gu-Da-Shih -Cross-Site Scripting(XSS) 0.7%
- CVE-2020-3938 SysJust Syuan-Gu-Da-Shih -Request-Forgery 1.5%
- CVE-2020-3937 SysJust Syuan-Gu-Da-Shih-SQL injection 1.4%
- CVE-2020-3927 ServiSign Windows Versions- Arbitrary File Deletion 1.2%
- CVE-2020-3926 ServiSign Windows Versions- Arbitrary File Access 1.5%
- CVE-2020-3925 ServiSign Windows Versions- Remote Code Execution via LoadLibrary 2.8%