Researchers identified a chain of flaws in PaperCut software that allows attackers to run code remotely without needing user credentials or login access.
A critical remote code execution vulnerability in Handlebars allows attackers to inject malicious JavaScript via manipulated template data, requiring an immediate update to version 4.7.10.