This site currently shows sample data for demonstration.

Vulnerabilities

CVE-2024-40721 | BDVDB-2026-244449 Detail

CHANGING Information TechnologyTCBServiSign Windows Version

Description#

The specific API in TCBServiSign Windows Version from CHANGING Information Technology does not properly validate server-side input. When a user visits a spoofed website, unauthenticated remote attackers can cause the TCBServiSign to load a DLL from an arbitrary path.

Impact#

CAPEC-251 Local Code Inclusion

Weaknesses#

  • CWE-20 Improper Input Validation

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.