CVE-2023-46445

An issue in AsyncSSH before 2.14.1 allows attackers to control the extension info message RFC 8308 via a man-in-the-middle attack, aka a "Rogue Extension Negotiation."...

CVE-2023-46445

CVE-2023-46445 affects AsyncSSH before 2.14.1, allowing MITM-controlled extension info messages (Rogue Extension Negotiation). IBM Storage Ceph integrations and various Linux distros reference this flaw. Mitigation: upgrade AsyncSSH to 2.14.1 or newer (patching in affected products where applicab...

CVE-2023-46445

An issue in AsyncSSH before 2.14.1 allows attackers to control the extension info message RFC 8308 via a man-in-the-middle attack, aka a "Rogue Extension Negotiation."...

CVE-2023-46445

creationtimestamp| type| source ---|---|--- 2023-11-09 03:10:30+00:00| published-proof-of-concept| https://github.com/ronf/asyncssh/security/advisories/GHSA-cfc2-wr2v-gxm5 2023-12-19 20:07:30+00:00| published-proof-of-concept| https://t.me/truesecator/5221 2023-12-20 14:29:56+00:00|...

CVE-2021-46445

creationtimestamp| type| source ---|---|--- 2022-01-29 00:22:31+00:00| seen| https://t.me/cibsecurity/36536...

CVE-2021-46445

CVE-2021-46445 affects H.H.G Multistore v5.1.0 and below. A SQL injection vulnerability exists in /admin/categories.php?box_group_id, enabling injection through the specified parameter. The entry is corroborated by multiple sources (NVD/CVE lists) and situates the impact as disclosed, with CVSS c...