CVE-2024-4879

CVE-2024-4879 Exploit & PoC - Nuclei Template CVE-2024-4879 - Jelly Template Injection Vulnerability in ServiceNow ServiceNow has addressed an input validation vulnerability that was identified in Vancouver and Washington DC Now Platform releases. This vulnerability could enable an unauthenticate...

service-now

service-now Service-Now Article Bruteforcer The idea here is that there is misconfiguration with articles and could expose sensitive information. Any Issues raise the it here - https://github.com/RandomRobbieBF/service-now/issues or submit a PR! How to Use python3 service-now.py -u...

CVE-2023-31014_Lab

CVE-2023-31014 Implicit Intent Hijacking Lab An educational Android Lab created based on the public report of CVE-2023-31014 in NVIDIA GeForce NOW for Android. It does not include NVIDIA source code, actual Action strings, or real authentication credentials. Facts confirmed from the public report...

Bulk Me Now! Plugin <= 2.0 - Cross-Site Scripting

Bulk Me Now! WordPress plugin = 2.0 contains a reflected cross-site scripting caused by lack of sanitization and escaping of a parameter before outputting it in the page, letting attackers execute malicious scripts in the context of high privilege users, exploit requires attacker to craft a...

CVE-2024-4879

CVE-2024-4879 ServiceNow, a widely used platform for business transformation, has recently disclosed three critical security vulnerabilities that could have severe consequences for organizations worldwide. These vulnerabilities, identified as CVE-2024–4879, CVE-2024–5217, and CVE-2024–5178, affec...

CVE-2024-4879

Jelly Template Injection Vulnerability in ServiceNow | POC CVE-2024-4879 Description: ServiceNow has addressed an input validation vulnerability that was identified in Vancouver and Washington, D.C. Now Platform releases. This vulnerability could enable an unauthenticated user to remotely execute...

CVE-2025-32421---Race-Condition-Vulnerability---Next.js

CVE-2025-32421---Race-Condition-Vulnerability---Next.js PoC Lab for CVE-2025-32421 – Next.js Race Condition Cache Poisoning Simulation CVE-2025-32421 Lab – Next.js Race Condition Cache Poisoning This lab reproduces the behavior described in CVE-2025-32421 through a simulation of race condition +...

CVE-2024-4879-ServiceNow

CVE-2024-4879-ServiceNow ServiceNow is a platform for business transformation which helps companies manage digital workflows for enterprise operations. CVE-2024-4879 could allow an unauthenticated user to remotely execute code within the Now Platform. This vulnerability exploits three issues by...

ServiceNow - Incomplete Input Validation

ServiceNow has addressed an input validation vulnerability that was identified in the Washington DC, Vancouver, and earlier Now Platform releases. This vulnerability could enable an unauthenticated user to remotely execute code within the context of the Now Platform. The vulnerability is addresse...

MAL-2026-18003 Malicious code in down-lo-ad-now-zip-mp3-duppy-writer-9bxwq-qpdzyd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 082189b6a0a6bb4bf5dd047752847d649a05cbcb3b2be4f37b4afc4fad9ff8ec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18001 Malicious code in down-lo-ad-now-zip-mp3-390322-the-silver-scream-2-welcome-to-horrorwood-4a2qf-tjkdio (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dfeaf7d62b7951d7a5635f144b3833cacf9f21ca1e1aea2176fb84a51652e769 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in down-lo-ad-now-zip-mp3-duppy-writer-9bxwq-qpdzyd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 082189b6a0a6bb4bf5dd047752847d649a05cbcb3b2be4f37b4afc4fad9ff8ec Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in down-lo-ad-now-zip-mp3-390322-the-silver-scream-2-welcome-to-horrorwood-4a2qf-tjkdio (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dfeaf7d62b7951d7a5635f144b3833cacf9f21ca1e1aea2176fb84a51652e769 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18008 Malicious code in down-load-available-zip-now-8238-bricks-are-heavy-0v3kh-yluceh (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c1126435d0e3d0827d524d5a97ffda6ba26a1e2fdae031e00b0c479d33db248a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18005 Malicious code in down-load-available-zip-now-12673-dirt-farmer-jn0vw-rkwppg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc1e0a3e5143137ac18e404020bbc4e46048367a976c6b0f5ad4f4e9aefe052f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18004 Malicious code in down-lo-ad-now-zip-mp3-year-of-the-gentleman-8mpja-vdihqg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7ed92a17b453fc61e1425415b02c40469a9f72a1839d6a4a004d026aa668f634 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18007 Malicious code in down-load-available-zip-now-42301-gloria-tp7wn-dcxkwl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a45abfeb77112428d6480098865fe190e7795ccb6d2ea11a07fad2bb6a531e9a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-18006 Malicious code in down-load-available-zip-now-265533-the-safeway-elhem-xoyofv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ecaee3664d8ee566d98d8862f978d1d0f21b2cbd30a11e713f85d9c698aaacc7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in down-load-available-zip-now-8238-bricks-are-heavy-0v3kh-yluceh (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c1126435d0e3d0827d524d5a97ffda6ba26a1e2fdae031e00b0c479d33db248a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in down-load-available-zip-now-42301-gloria-tp7wn-dcxkwl (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a45abfeb77112428d6480098865fe190e7795ccb6d2ea11a07fad2bb6a531e9a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...