Multiple vulnerabilities have been discovered in various products, including ABB RMC-100, Alinto SOPE, aonetheme Service Finder Booking, ApusWP Kossy, and asaquzzaman WP Human Resource Management. These vulnerabilities include stack-based buffer overflow, privilege escalation, PHP remote file inclusion, and cross-site scripting. The affected products and versions are listed, along with their corresponding CVE numbers and CVSS scores. The vulnerabilities can be exploited remotely and may allow attackers to overflow buffers, escalate privileges, inject code, or perform other malicious actions. Some vendors were contacted about the disclosures but did not respond. The exploits have been disclosed to the public and may be used. The vulnerabilities affect various components, including REST interfaces, web pages, and PHP programs. Users are advised to update their products to the latest versions to mitigate these vulnerabilities. The CVSS scores range from 7.1 to 9.8, indicating high to critical severity.