Several vulnerabilities have been identified across various software and hardware products. OVMS3 3.3.005 exhibits a buffer overflow in canformat_gvret.cpp, potentially leading to denial of service or code execution. Tenda routers, including W308R, W3002R, and FH303/A300, suffer cookie session weaknesses, allowing DNS manipulation. Weaver E-office versions before 10.0_20221201 are vulnerable to unauthenticated arbitrary file upload. Synway SMG Gateway Management has an OS command injection flaw in its RADIUS configuration. Directorist Booking and Directorist Social Login plugins are susceptible to SQL injection and privilege escalation respectively. Milesight AIOT cameras use default SSL certificates with weak keys. AGL app-framework-main is vulnerable to a Zip Slip path traversal. Cannelloni v2.0.0 also has a buffer overflow issue. Carlson VASCO-B GNSS Receiver lacks authentication, allowing unauthorized configuration changes. Finally, several applications, including Prime95, XATABoost CMS, and others present various buffer overflows and code execution vulnerabilities.