Unauthenticated access to live video and device data affects Xiongmai XM530-based IP cameras running firmware V5.00.R02.000807D8.10010.346624.S with ONVIF 21.06, where the ONVIF service fails to enforce authentication on 31 endpoints. Any remote attacker who can reach the camera's ONVIF port can pull sensitive device information and view real-time RTSP/ONVIF video streams without credentials. Publicly available exploit code exists, though the flaw is not listed in CISA KEV and EPSS is modest (0.85%, 54th percentile).
Full administrative takeover of ClipBucket 5.5.2 is possible because the video-sharing platform ships with hardcoded default administrative credentials, letting any unauthenticated remote attacker sign into the admin panel and control the entire application. Publicly available exploit material (a Medium write-up) documents the attack, and the CVSS 3.1 base score is 9.8 (AV:N/AC:L/PR:N/UI:N). This is a network-reachable, no-interaction flaw, though EPSS is modest at 0.57% (43rd percentile) and it is not currently listed in CISA KEV.
Stored cross-site scripting leading to code execution in Frappe Framework 15.89.0 (and the ERPNext application built on it) lets attackers upload a crafted XML/SVG file through the Attachments module that runs attacker-controlled script when a victim views it. Tagged as XSS/RCE/File Upload with a publicly available exploit code, though EPSS remains low at 0.44% (35th percentile) and it is not on CISA KEV. The CVSS 9.6 rating reflects a scope-changing, user-interaction-dependent attack rather than direct server-side compromise.
Arbitrary code execution in Umbraco CMS 16.3.3 is claimed via upload of a crafted PDF file that abuses insufficient file-type validation (CWE-434), potentially leading to server-side code execution. The finding is explicitly DISPUTED by Umbraco, which states that enforcing upload validation is the deploying administrator's responsibility per documentation, mirroring the earlier CVE-2023-49279. No public exploit is confirmed and EPSS is low (0.50%, 39th percentile), so despite the nominal CVSS 10.0 this reflects a contested, configuration-dependent condition rather than a proven turnkey RCE.
Ragic Enterprise Cloud Database ships with a hard-coded cryptographic key (CWE-321), and because that key is fixed across deployments an unauthenticated remote attacker who obtains it can forge the platform's verification information and authenticate as any user, including administrative accounts. No prior login, user interaction, or non-default configuration is required - the only real precondition is network reachability of the affected service, making this a broad, high-severity authentication bypass against default installations. At the time of analysis there is no evidence of confirmed active exploitation (not listed in CISA KEV) and no public exploit code identified, and the EPSS score remains low at 0.53% (43rd percentile); however, the flaw was publicly documented by TWCERT/CC, so the fixed key should be treated as effectively public and the low EPSS should not be read as low risk.
Unauthenticated network attackers can access the Sharp MP-01 digital signage media player’s web interface and alter settings or deliver content without credentials. The flaw (CWE-306, CVSS 4.0 base 9.2) affects all firmware versions; exploitation requires a network path to the device, and the vendor’s AC:H/AT:P vector indicates an additional unspecified precondition for reliable exploitation. No public exploit code or CISA KEV entry was identified at time of analysis, and EPSS is 0.32% (24th percentile).