heroku-CVE-2013-0333

heroku-CVE-2013-0333 Inspect all of your heroku apps to see if they are running a vulnerable version of Rails Background A serious security vulnerability has been found in the Ruby on Rails framework. This exploit affects nearly all applications running Rails versions 2.3 and 3.0, and a patch has...

heroku-CVE-2013-0269

heroku-CVE-2013-0269 Inspecciona todas tus aplicaciones de Heroku para ver si están ejecutando una versión vulnerable de JSON Antecedentes Se ha encontrado una vulnerabilidad de seguridad en la gema JSON de Ruby. Esta es la causa raíz del problema de inyección en MySQL recientemente anunciado en...

tko-subs

tko-subs This tool allows: To check whether a subdomain can be taken over because it has: a dangling CNAME pointing to a CMS provider Heroku, Github, Shopify, Amazon S3, Amazon CloudFront, etc. that can be taken over. a dangling CNAME pointing to a non-existent domain name one or more wrong/typoe...

terrier

Terrier Terrier es una herramienta de análisis de imágenes y contenedores que se puede utilizar para escanear imágenes OCI y contenedores para identificar y verificar la presencia de archivos específicos según sus hashes. Un artículo detallado sobre Terrier se puede encontrar en el blog de Heroku...

flask_heroku_redirector

Flask Heroku C2 Sample A simple Python Flask example application that's ready to run on Heroku. Development Setup virtualenv venv source venv/bin/activate pip install -r requirements.txt python app.py Deploy heroku create git push heroku master...

subjack

subjack DNS Takeover Scanner Subjack is a DNS takeover scanner written in Go designed to scan a list of domains concurrently and identify ones that are able to be hijacked. With Go's speed and efficiency, this tool really stands out when it comes to mass-testing. Always double check the results...

vulnreport

Abandoned Project This project is not currently maintained and has been abandoned. Vulnreport Pentesting management and automation platform Vulnreport is a platform for managing penetration tests and generating well-formatted, actionable findings reports without the normal overhead that takes up...

heroku-CVE-2013-0156

heroku-CVE-2013-0156 This vulnerability has been supplanted by CVE-2013-0333. See https://groups.google.com/forum/?fromgroups=!topic/rubyonrails-security/1h2DR63ViGo for more details. A replacement for this script, covering CVE-2013-0333, can be found at...

heroku-CVE-2022-44268-reproduction

This repository does not have a README...

PowMix botnet targets Czech workforce

Cisco Talos discovered an ongoing malicious campaign, operating since at least December 2025, affecting a broader workforce in the Czech Republic with a previously undocumented botnet we call "PowMix." PowMix employs randomized command-and-control C2 beaconing intervals, rather than persistent...

EUVD-2021-2433

Malware in sbrugna...

EUVD-2022-6579

Malicious code in bioql PyPI...

Malicious code in heroku-sudo (npm)

The package heroku-sudo was found to contain malicious code...

Malicious code in buffered-logger-heroku (npm)

The package buffered-logger-heroku was found to contain malicious code...

MAL-2025-16305 Malicious code in buffered-logger-heroku (npm)

The package buffered-logger-heroku was found to contain malicious code...

MAL-2025-22399 Malicious code in heroku-sudo (npm)

The package heroku-sudo was found to contain malicious code...

CVE-2020-7634

heroku-addonpool through 0.1.15 is vulnerable to Command Injection...

Malicious code in heroku-tl (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8a78aff2389300306864bb3d44e1ac70675e128845a4d734dae5ffbc39076b93 Clone of a legit Telegram client, with a hidden code that, under some conditions, can attempt to destroy the Linux OS. --- Category: MALICIOUS - The campaign h...

MAL-2025-2967 Malicious code in heroku-tl (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8a78aff2389300306864bb3d44e1ac70675e128845a4d734dae5ffbc39076b93 Clone of a legit Telegram client, with a hidden code that, under some conditions, can attempt to destroy the Linux OS. --- Category: MALICIOUS - The campaign h...

A Bootiful Podcast: Heroku's Terence Lee

Hi, Spring fans! Happy Spring Boot 3.4.0 release day to those who celebrate! Today I'm joined by both Terence Lee, from Heroku, and my friend DaShaun Carter, and we talk about platforms, buildpacks, and more. heroku paas buildpacks,...