Add vpatch-CVE-2024-32870 rule and test

[crowdsec-automation]

This rule detects unauthenticated information disclosure in the iTop Hub Connector by matching requests to the specific endpoint /pages/exec.php with the required query parameters:

• exec_module=itop-hub-connector
• exec_page=launch.php
• target=inform_after_setup

Each parameter is matched using the equals operator after applying lowercase and urldecode transforms to ensure case insensitivity and normalization. The URI is matched using contains to ensure the request is targeting the correct script. This approach minimizes false positives by requiring all three parameters to be present with exact values, as seen in the exploit path.

Validation Checklist:

• All value: fields are lowercase.
• All relevant transforms include lowercase and urldecode.
• No match.value contains capital letters.
• All matches use contains or equals as appropriate (no regex unless necessary).
• No use of both and and or in the same rule block.

Exploit URL: https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-32870.yaml