aioasuswrt (>=1.1.20 <=1.3.3), aiosftp (>=0.0.1 <=0.3.0) +28 more potentially affected by CVE-2023-46445 via asyncssh (>=1.10.0 <=2.14.0)

asyncssh PYPI version =1.10.0, =1.1.20, =0.0.1, =0.6.0, =0.3.0, =1.2.1, =0.4.0, =0.1.0, =4.3.5, =0.35.0, =3.1.1, =0.6.5, =0.8.0, =2.8.1, =0.2.0, =0.1.0, =0.3.21 and more Source cves: CVE-2023-46445 Source advisory: OSV:PYSEC-2023-237...

CVE-2023-46445

CVE-2023-46445 affects AsyncSSH before 2.14.1, allowing MITM-controlled extension info messages (Rogue Extension Negotiation). IBM Storage Ceph integrations and various Linux distros reference this flaw. Mitigation: upgrade AsyncSSH to 2.14.1 or newer (patching in affected products where applicab...

CVE-2023-46445

An issue in AsyncSSH before 2.14.1 allows attackers to control the extension info message RFC 8308 via a man-in-the-middle attack, aka a "Rogue Extension Negotiation."...

aioasuswrt (>=1.1.20 <=1.3.3), aiosftp (>=0.0.1 <=0.3.0) +28 more potentially affected by CVE-2023-46445 via asyncssh (>=1.10.0 <=2.14.0)

asyncssh PYPI version =1.10.0, =1.1.20, =0.0.1, =0.6.0, =0.3.0, =1.2.1, =0.4.0, =0.1.0, =4.3.5, =0.35.0, =3.1.1, =0.6.5, =0.8.0, =2.8.1, =0.2.0, =0.1.0, =0.3.21 and more Source cves: CVE-2023-46445 Source advisory: OSV:GHSA-CFC2-WR2V-GXM5...

CVE-2023-46445

creationtimestamp| type| source ---|---|--- 2023-11-09 03:10:30+00:00| published-proof-of-concept| https://github.com/ronf/asyncssh/security/advisories/GHSA-cfc2-wr2v-gxm5 2023-12-19 20:07:30+00:00| published-proof-of-concept| https://t.me/truesecator/5221 2023-12-20 14:29:56+00:00|...

CVE-2021-46445

creationtimestamp| type| source ---|---|--- 2022-01-29 00:22:31+00:00| seen| https://t.me/cibsecurity/36536...

CVE-2021-46445

CVE-2021-46445 affects H.H.G Multistore v5.1.0 and below. A SQL injection vulnerability exists in /admin/categories.php?box_group_id, enabling injection through the specified parameter. The entry is corroborated by multiple sources (NVD/CVE lists) and situates the impact as disclosed, with CVSS c...