CVE-2019-20768

CVE-2019-20768 affects ServiceNow IT Service Management ( Kingston through Patch 14-1, London through Patch 7, Madrid before patch 4). The issue is a stored XSS vulnerability triggered by crafted sysparm_item_guid and sys_id parameters in an Incident Request to service_catalog.do. The connected d...

Phish of GoDaddy Employee Jeopardized Escrow.com, Among Others

A spear-phishing attack this week hooked a customer service employee at GoDaddy.com, the world's largest domain name registrar, KrebsOnSecurity has learned. The incident gave the phisher the ability to view and modify key customer records, access that was used to change domain settings for a...

MISA expands with new members and new product additions

Another RSA Conference RSAC and another big year for the Microsoft Intelligent Security Association MISA. MISA was launched at RSAC 2018 with 26 members and a year later we had doubled in size to 53 members. Today, I am excited to share that the association has again doubled in size to 102 member...

New Microsoft Security innovations and partnerships

Today on the Official Microsoft Blog, Ann Johnson, Corporate Vice President of the Cybersecurity Solutions Group, shared how Microsoft is helping turn the tide in cybersecurity by putting artificial intelligence AI in the hands of defenders. She announced the general availability of Microsoft...

CVE-2016-1600

The ServiceNow driver in NetIQ Identity Manager versions prior to 4.6 are susceptible to an information disclosure vulnerability...

CVE-2016-1600

The ServiceNow driver in NetIQ Identity Manager versions prior to 4.6 are susceptible to an information disclosure vulnerability...

Information disclosure

The ServiceNow driver in NetIQ Identity Manager versions prior to 4.6 are susceptible to an information disclosure vulnerability...

CVE-2016-1600

CVE-2016-1600 affects the ServiceNow driver in NetIQ Identity Manager prior to version 4.6. The vulnerability is an information disclosure issue. CVSSv3 base score 7.5 (HIGH) with network access, no authentication, and no user interaction required; confidentiality impact is HIGH, others NONE. The...

Sh00T - A Testing Environment for Manual Security Testers

A Testing Environment for Manual Security Testers. Sh00t is a task manager to let you focus on performing security testing provides To Do checklists of test cases helps to create bug reports with customizable bug templates Features: Dynamic Task Manager to replace simple editors or task managemen...

CVE-2018-7748

reportviewer.do in ServiceNow Release Jakarta Patch 8 and earlier allows remote attackers to execute arbitrary code via '$xyz' Glide Scripting Injection in the sysparmmedia parameter...

Sql injection

reportviewer.do in ServiceNow Release Jakarta Patch 8 and earlier allows remote attackers to execute arbitrary code via '$xyz' Glide Scripting Injection in the sysparmmedia parameter...

CVE-2018-7748

CVE-2018-7748 affects ServiceNow (Report_viewer.do) on Jakarta releases up to Patch 8, via a Glide Scripting Injection in the sysparm_media parameter. The underlying issue is remote arbitrary code execution. The provided sources identify the vulnerable component as report_viewer.do and the inject...

CVE-2018-7748

reportviewer.do in ServiceNow Release Jakarta Patch 8 and earlier allows remote attackers to execute arbitrary code via '$xyz' Glide Scripting Injection in the sysparmmedia parameter...

ServiceNow ITSM Cross-Site Scripting Vulnerability

ServiceNow ITSM is an IT service management system. The system features incident management, problem management, asset and cost management. A cross-site scripting vulnerability exists in ServiceNow ITSM version 2016-06-02. A remote attacker can exploit the vulnerability to obtain cookies for othe...

Code injection

ServiceNow ITSM 2016-06-02 has XSS via the First Name or Last Name field of My Profile aka navpage.do, or the Search bar of My Portal aka searchresults.do...

CVE-2018-8720

ServiceNow ITSM 2016-06-02 has XSS via the First Name or Last Name field of My Profile aka navpage.do, or the Search bar of My Portal aka searchresults.do...

CVE-2018-8720

The vulnerability CVE-2018-8720 affects ServiceNow ITSM 2016-06-02 . A cross-site scripting (XSS) flaw exists in the web interface via the First Name/Last Name fields in My Profile (navpage.do) or the Search bar in My Portal (search_results.do) . Publicly documented entries (NVD, CNVD, CVE lists)...

CVE-2018-8720

ServiceNow ITSM 2016-06-02 has XSS via the First Name or Last Name field of My Profile aka navpage.do, or the Search bar of My Portal aka searchresults.do...

community.servicenow.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-455095 Description| Value ---|--- Affected Website:| community.servicenow.com Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Remediation Guide:| OWASP Open Redirect Cheat She...

community.servicenow.com XSS vulnerability

Open Bug Bounty ID: OBB-361054 Description| Value ---|--- Affected Website:| community.servicenow.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...