CHANGING

Products

ProductCVEsExploitedLatest
ServiSign Windows versions3–Feb 3, 2020
Syuan-Gu-Da-Shih3–Feb 4, 2020
IDExpert Windows Logon Agent2–Mar 2, 2026
Mobile One Time Password2–Jul 1, 2024
Clinic Image System2–Aug 29, 2025
TSA1–Aug 29, 2025
MOTP(Mobile One Time Password)1–Dec 29, 2021
CGServiSign1–Sep 23, 2026

Exploited and recent CVEs

  • CVE-2026-15027 High 8.8 Changing|CGServiSign - OS Command Injection 3.2%
  • CVE-2026-3000 Critical 9.8 Changing|IDExpert Windows Logon Agent - Remote Code Execution 0.6%
  • CVE-2026-2999 Critical 9.8 Changing|IDExpert Windows Logon Agent - Remote Code Execution 0.6%
  • CVE-2025-8858 High 7.5 Changing|Clinic Image System - SQL Injection 0.4%
  • CVE-2025-8857 Critical 9.8 Changing|Clinic Image System - Use of Hard-coded Credentials 0.5%
  • CVE-2025-8861 Critical 9.8 Changing|TSA - Missing Authentication 0.5%
  • CVE-2024-3123 High 7.2 CHANGING Mobile One Time Password - Arbitrary File Upload 0.6%
  • CVE-2024-3122 Medium 4.9 CHANGING Mobile One Time Password - Arbitrary File Reading 0.6%
  • CVE-2021-44161 High 8.8 Changing Information Technology Inc. MOTP(Mobile One Time Password) - SQL Injection 0.5%
  • CVE-2020-3939 Medium 6.1 SysJust Syuan-Gu-Da-Shih -Cross-Site Scripting(XSS) 0.7%
  • CVE-2020-3938 Critical 9.8 SysJust Syuan-Gu-Da-Shih -Request-Forgery 1.5%
  • CVE-2020-3937 High 8.1 SysJust Syuan-Gu-Da-Shih-SQL injection 1.4%
  • CVE-2020-3927 High 8.3 ServiSign Windows Versions- Arbitrary File Deletion 1.2%
  • CVE-2020-3926 Medium 6.1 ServiSign Windows Versions- Arbitrary File Access 1.5%
  • CVE-2020-3925 High 8.3 ServiSign Windows Versions- Remote Code Execution via LoadLibrary 2.8%