The text details multiple high-severity vulnerabilities across various software products. These vulnerabilities include SQL injection, command execution, and remote code execution bugs. Several products like AdminPando, TCIS-3+, and Docan[.]co are affected, enabling complete system compromise. Others, such as Synectix and SignalK, allow unauthenticated modification or command injection respectively. Several SandboxJS vulnerabilities lead to sandbox escapes and arbitrary code execution. Additional vulnerabilities exist in CI4MS leading to RCE and Microsoft’s Semantic Kernel introducing an arbitrary file write. EPyT-Flow has an issue related to JSON deserialization leading to command execution. Other vulnerabilities include buffer overflows that allow for arbitrary code execution or denial of service in StreamRipper32, GoldWave, Filetto, Konica Minolta FTP Utility and CloudMe. CraftCMS suffered from a deserialization issue within its vCard plugin. Each vulnerability lists a CVSS score of 9.8 or 10, indicating critical severity, along with a CVE identifier, and links for further information.