Vulnerabilities

CGServiSign developed by Changing has a OS Command Injection vulnerability.

IDExpert Windows Logon Agent developed by Changing has a Remote Code Execution vulnerability, allowing unauthenticated remote attackers to force the system to download arbitrary DLL files from a remote source and execute…

IDExpert Windows Logon Agent developed by Changing has a Remote Code Execution vulnerability, allowing unauthenticated remote attackers to force the system to download arbitrary executable files from a remote source and…

Clinic Image System developed by Changing has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database contents.

Clinic Image System developed by Changing contains hard-coded Credentials, allowing unauthenticated remote attackers to log into the system using administrator credentials embedded in the source code.

TSA developed by Changing has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to read, modify, and delete database contents.

The login mechanism via device authentication of CGFIDO from Changing Information Technology has an Authentication Bypass vulnerability.

The passwordless login mechanism in CGFIDO from Changing Information Technology has an Authentication Bypass vulnerability, allowing remote attackers with regular privileges to send a crafted request to switch to the ide…

IDExpert from CHANGING Information Technology does not properly validate a specific parameter in the administrator interface, allowing remote attackers with administrative privileges to inject and execute OS commands on…

IDExpert from CHANGING Information Technology does not properly validate a parameter for a specific functionality, allowing unauthenticated remote attackers to inject JavsScript code and perform Reflected Cross-site scri…

IDExpert from CHANGING Information Technology does not properly validate a specific parameter in the administrator interface, allowing remote attackers with administrator privileges to exploit this vulnerability to read…

The specific API in HWATAIServiSign Windows Version from CHANGING Information Technology does not properly validate the length of server-side inputs.

The specific API in TCBServiSign Windows Version from CHANGING Information Technology does does not properly validate the length of server-side input.

The specific API in TCBServiSign Windows Version from CHANGING Information Technology does not properly validate server-side input.

The specific API in TCBServiSign Windows Version from CHANGING Information Technology does not properly validate server-side input.

The encryption strength of the authorization keys in CHANGING Information Technology TCBServiSign Windows Version is insufficient.

CHANGING Mobile One Time Password's uploading function in a hidden page does not filter file type properly.

CHANGING Mobile One Time Password does not properly filter parameters for the file download functionality, allowing remote attackers with administrator privilege to read arbitrary file on the system.

ChangingTec MOTP system has a path traversal vulnerability.

ChangingTech MegaServiSignAdapter component has a vulnerability of Out-of-bounds Read due to insufficient validation for parameter length.

ChangingTech MegaServiSignAdapter component has a vulnerability of improper input validation.

ChangingTech MegaServiSignAdapter component has a path traversal vulnerability within its file reading function.

ChangingTec ServiSign component has a path traversal vulnerability due to insufficient filtering for special characters in the DLL file path.

ChangingTec ServiSign component has a path traversal vulnerability.

ChangingTec ServiSign component has insufficient filtering for special characters in the connection response parameter.