413 matches found
CYBERDUDEBIVASH-ServiceNow-AI-Agent-Audit-Script
CYBERDUDEBIVASH ServiceNow AIエージェント監査スクリプト v1.1（2026年1月） あなたのAIの未来を守る – 2026年アップデート対応のエンタープライズグレード監査ツール このスクリプトは、ServiceNow AIエージェントを対象に、CVE-2025-12420などの脆弱性、ガバナンスのギャップ、コンプライアンスリスクを監査します。サイバーセキュリティ、AIアプリ、サービス、コンサルティングを提供するグローバルエコシステム、CYBERDUDEBIVASHによる提供です。 価格 :...
aisecplus-week01-servicenow-ai-security-incident
AISec Plus Week01 - 脅威のマッピング AIセキュリティインシデント調査: ServiceNow Virtual Agent 脆弱性 CVE-2025-12420 何が起きたのか？ ServiceNow AI Platform に深刻な脆弱性が発見され、認証されていない攻撃者が正当なユーザーになりすまし、その権限で操作を実行できるようになりました。 Virtual Agent の認証プロセスの脆弱性により、攻撃者は以下を実行できました： 認証制御の回避 特権ユーザーへのなりすまし 管理操作の実行 新規アカウントの作成 プラットフォームリソースの変更 インシデント概要...
CVE-2026-6875-PoC-Exploit
CVE-2026-6875 - ServiceNow 预认证 RCE 漏洞利用框架与 PoC 验证器 🔥 ServiceNow AI 平台 — JavaScript 注入 → 沙箱逃逸 → RCE → Root 提权 漏洞利用框架与安全验证器 仅供授权安全测试使用。 ⚖️ 法律免责声明与负责任使用 本工具仅供教育和授权渗透测试目的使用。 作者和贡献者不对因使用本软件而造成的任何滥用或损害负责。用户须自行确保在测试前已获得目标所有者的明确书面许可。根据《计算机欺诈与滥用法》（CFAA）及全球类似法律，未经授权访问计算机系统属于违法行为。 使用本软件即表示您同意：...
CVE-2024-4879
CVE-2024-4879 CVE-2024-4879.py は、ServiceNow インスタンスの特定の脆弱性を検出し、脆弱性が見つかった場合にデータベース接続情報をダンプするために設計された Python スクリプトです。このツールは、セキュリティ研究者やペネトレーションテスターにとって特に有用です。 機能 ServiceNow の特定の脆弱性について URL をスキャンします。 脆弱性が検出された場合、データベース接続情報をダンプします。 SSL 警告とリクエストタイムアウトを処理します。 色分けされた結果で明確なコンソール出力を提供します。 必要条件 Python 3.x...
CVE-2024-4879
CVE-2024-4879 Exploit & PoC - Nuclei テンプレート CVE-2024-4879 - ServiceNow における Jelly テンプレートインジェクションの脆弱性 ServiceNow は、Vancouver および Washington DC Now Platform リリースで特定された入力検証の脆弱性に対処しました。この脆弱性により、認証されていないユーザーが Now Platform のコンテキスト内でリモートからコードを実行できる可能性があります。ServiceNow...
CVE-2026-86859
ServiceNow has remediated an authorization bypass security issue that was identified in the ServiceNow AI Platform. This security issue, if exploited, could enable an unauthenticated user to access data within the ServiceNow AI Platform that the user otherwise would not be entitled to access,...
CVE-2026-86857
ServiceNow has remediated an authorization bypass security issue that was identified in the ServiceNow AI Platform. This security issue, if exploited, could enable an authenticated user to access data within the ServiceNow AI Platform that the user otherwise would not be entitled to access,...
CVE-2026-86858
ServiceNow has remediated an improper access control security issue that was identified in the ServiceNow AI Platform. This security issue could enable an unauthenticated user, in certain circumstances, to create, modify, or delete instance data beyond what was intended. In August 2026, ServiceNo...
CVE-2026-86860
ServiceNow has remediated a missing authorization vulnerability that was identified in the ServiceNow AI Platform. This vulnerability could enable an unauthenticated user, in certain circumstances, to extract instance data beyond what was intended, resulting in privilege escalation. ServiceNow...
CVE-2026-13016
ServiceNow has remediated a SQL injection vulnerability that was identified in the ServiceNow AI Platform. This vulnerability could enable an unauthenticated user, in certain circumstances, to execute arbitrary SQL statements against the instance's underlying database and gain access to, or modif...
CVE-2026-86860 Unauthenticated Sensitive Data Disclosure in ServiceNow AI Platform
ServiceNow has remediated a missing authorization vulnerability that was identified in the ServiceNow AI Platform. This vulnerability could enable an unauthenticated user, in certain circumstances, to extract instance data beyond what was intended, resulting in privilege escalation. ServiceNow...
CVE-2026-86860
The ServiceNow AI Platform contains a missing authorization vulnerability that could allow an unauthenticated user to extract instance data beyond intended limits, potentially leading to privilege escalation . ServiceNow has released security updates for hosted instances and provided updates for ...
CVE-2026-86860 Unauthenticated Sensitive Data Disclosure in ServiceNow AI Platform
ServiceNow has remediated a missing authorization vulnerability that was identified in the ServiceNow AI Platform. This vulnerability could enable an unauthenticated user, in certain circumstances, to extract instance data beyond what was intended, resulting in privilege escalation. ServiceNow...
EUVD-2026-86403
ServiceNow has remediated a missing authorization vulnerability that was identified in the ServiceNow AI Platform. This vulnerability could enable an unauthenticated user, in certain circumstances, to extract instance data beyond what was intended, resulting in privilege escalation. ServiceNow...
EUVD-2026-86400
ServiceNow has remediated an authorization bypass security issue that was identified in the ServiceNow AI Platform. This security issue, if exploited, could enable an unauthenticated user to access data within the ServiceNow AI Platform that the user otherwise would not be entitled to access,...
CVE-2026-86859 Unauthenticated Arbitrary Record Disclosure in ServiceNow AI Platform
ServiceNow has remediated an authorization bypass security issue that was identified in the ServiceNow AI Platform. This security issue, if exploited, could enable an unauthenticated user to access data within the ServiceNow AI Platform that the user otherwise would not be entitled to access,...
CVE-2026-86859
The ServiceNow AI Platform is affected by an authorization bypass security issue. If exploited, an unauthenticated user could gain access to data within the platform that they are not entitled to see, potentially leading to further unintended access. ServiceNow has already deployed a security upd...
CVE-2026-86859 Unauthenticated Arbitrary Record Disclosure in ServiceNow AI Platform
ServiceNow has remediated an authorization bypass security issue that was identified in the ServiceNow AI Platform. This security issue, if exploited, could enable an unauthenticated user to access data within the ServiceNow AI Platform that the user otherwise would not be entitled to access,...
CVE-2026-13016 Unauthenticated SQL Injection in ServiceNow AI Platform
ServiceNow has remediated a SQL injection vulnerability that was identified in the ServiceNow AI Platform. This vulnerability could enable an unauthenticated user, in certain circumstances, to execute arbitrary SQL statements against the instance's underlying database and gain access to, or modif...
CVE-2026-13016 Unauthenticated SQL Injection in ServiceNow AI Platform
ServiceNow has remediated a SQL injection vulnerability that was identified in the ServiceNow AI Platform. This vulnerability could enable an unauthenticated user, in certain circumstances, to execute arbitrary SQL statements against the instance's underlying database and gain access to, or modif...