Skip to content
OpenAdvisories

Archive

8 June 2026

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-39908 Public exploit

    OpenBullet2 0.3.2 NTLMv2 Hash Disclosure via UNC Path Proxy Source

    OpenBullet2 through version 0.3.2 on Windows contains a credential disclosure vulnerability that allows remote attackers to capture the NTLMv2 hash of the process user by configuring a job proxy source with a UNC path pointing to an attacker-controlled server…

  • Medium 4.3
    CVE-2026-11518 Public exploit

    SourceCodester Inventory System User Management users.php cross site scripting

    A vulnerability was identified in SourceCodester Inventory System 1.0. Affected is an unknown function of the file /users.php of the component User Management Page. The manipulation of the argument fullname/username leads to cross site scripting. The attack i…