
CVE-2024-4879 & CVE-2024-5217 ServiceNow RCE Scanning Using Nuclei & Shodan Dork to find it.
CVE-2024-4879 & CVE-2024-5217 ServiceNow RCE Scanning Using Nuclei & Shodan Dork to find it.
https://www.assetnote.io/resources/research/chaining-three-bugs-to-access-all-your-servicenow-data
nuclei -t CVE-2024-4879-Detect-Database-ServiceNow.yaml -l TargetList.txt
nuclei -t CVE-2024-4879-Detect-Multiplication-ServiceNow.yaml -l TargetList.txt
nuclei -t CVE-2024-5217-Detect-Incomplete-Input-Validation-ServiceNow.yaml -l TargetList.txt
server: ServiceNow "200"