{"vulnerability": "CVE-2026-8924", "sightings": [{"uuid": "91e0ed13-72f4-4277-9d2d-5e63e02f45cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8924", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mprivwaz5n23", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-8924 \u0432 curl: \u043a\u0430\u043a \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u043a\u0443\u043a\u0438 \u0438 \u0443\u0433\u0440\u043e\u0436\u0430\u0442\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438\n\n\n\nhttps://kripta.biz/posts/B2598B17-B846-424F-96E4-6674B911B929", "creation_timestamp": "2026-07-03T21:36:31.598775Z"}, {"uuid": "97dfe04d-4bba-423c-a1bb-2ed11e25791f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89243", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvansom7pk2t", "content": "CVE-2026-89243 - avideo\nThe AVideo video platform does not clean the text entered for a user group name. An administrator who can manage groups could add hidden HTML or JavaScript that runs in the browser of any\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#avideo #wwbn #CVE #infosec", "creation_timestamp": "2026-09-11T13:20:11.965732Z"}, {"uuid": "4a61c49a-1a31-403d-af99-d518a1be8501", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89249", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvaowhqh2r2j", "content": "CVE-2026-89249 - avideo\nThe YPTWallet add\u2011on in AVideo stores cryptocurrency wallet information without cleaning it first. When an administrator opens the page that shows pending withdrawals, any hidden code\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#avideo #wwbn #CVE #infosec", "creation_timestamp": "2026-09-11T13:40:07.434030Z"}, {"uuid": "792b4a9c-3343-4f35-af55-b5420977bdd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89243", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvaqgvrgiv2j", "content": "\ud83d\udea8 CVE-2026-89243 \u2014 CVSS 9.2 CRITICAL\n\nWWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-89243\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-11T14:07:11.553281Z"}, {"uuid": "d9312e82-465a-4eb4-85ab-ea4097d253e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89249", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvaqh6ljct2t", "content": "\ud83d\udea8 CVE-2026-89249 \u2014 CVSS 9.3 CRITICAL\n\nAVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vulne...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-89249\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-11T14:07:20.770277Z"}]}