Attackers Chain Two PaperCut Flaws to Execute Code Without Authentication

The feed reports widespread active exploitation and disclosure of critical vulnerabilities across PaperCut, ownCloud, ServiceNow, cPanel, Next.js, ZBT routers, Unitree robots, and other products. It also covers state-sponsored campaigns, malware, supply-chain compromises, phishing and session theft, malicious browser extensions, AI-agent prompt injection, and GPU Rowhammer research. Several issues enable unauthenticated remote code execution or root access, including vulnerabilities listed in CISA’s KEV catalog; urgent patching and exposure reduction are warranted.