heroku-CVE-2013-0333

heroku-CVE-2013-0333 Inspect all of your heroku apps to see if they are running a vulnerable version of Rails Background A serious security vulnerability has been found in the Ruby on Rails framework. This exploit affects nearly all applications running Rails versions 2.3 and 3.0, and a patch has...

subjack

subjack DNS Takeover Scanner Subjack is a DNS takeover scanner written in Go designed to scan a list of domains concurrently and identify ones that are able to be hijacked. With Go's speed and efficiency, this tool really stands out when it comes to mass-testing. Always double check the results...

vulnreport

Abandoned Project This project is not currently maintained and has been abandoned. Vulnreport Pentesting management and automation platform Vulnreport is a platform for managing penetration tests and generating well-formatted, actionable findings reports without the normal overhead that takes up...

tko-subs

tko-subs This tool allows: To check whether a subdomain can be taken over because it has: a dangling CNAME pointing to a CMS provider Heroku, Github, Shopify, Amazon S3, Amazon CloudFront, etc. that can be taken over. a dangling CNAME pointing to a non-existent domain name one or more wrong/typoe...

flask_heroku_redirector

Flask Heroku C2 Sample A simple Python Flask example application that's ready to run on Heroku. Development Setup virtualenv venv source venv/bin/activate pip install -r requirements.txt python app.py Deploy heroku create git push heroku master Setup set port to forward on Defaults to 80: heroku...

heroku-CVE-2013-0269

heroku-CVE-2013-0269 Inspect all of your heroku apps to see if they are running a vulnerable version of JSON Background A security vulnerability has been found in the Ruby JSON gem. This is the root cause for the recently-announced MySQL injection issue in Rails. A new release of the JSON gem is...

heroku-CVE-2013-0156

heroku-CVE-2013-0156 This vulnerability has been supplanted by CVE-2013-0333. See https://groups.google.com/forum/?fromgroups=!topic/rubyonrails-security/1h2DR63ViGo for more details. A replacement for this script, covering CVE-2013-0333, can be found at...

heroku-CVE-2022-44268-reproduction

This repository does not have a README...

terrier

Terrier Terrier es una herramienta de análisis de imágenes y contenedores que se puede utilizar para escanear imágenes OCI y contenedores para identificar y verificar la presencia de archivos específicos según sus hashes. Un artículo detallado sobre Terrier se puede encontrar en el blog de Heroku...

PowMix botnet targets Czech workforce

Cisco Talos discovered an ongoing malicious campaign, operating since at least December 2025, affecting a broader workforce in the Czech Republic with a previously undocumented botnet we call "PowMix." PowMix employs randomized command-and-control C2 beaconing intervals, rather than persistent...

EUVD-2021-2433

Malware in sbrugna...

EUVD-2022-6579

Malicious code in bioql PyPI...

Malicious code in heroku-sudo (npm)

The package heroku-sudo was found to contain malicious code...

MAL-2025-16305 Malicious code in buffered-logger-heroku (npm)

The package buffered-logger-heroku was found to contain malicious code...

MAL-2025-22399 Malicious code in heroku-sudo (npm)

The package heroku-sudo was found to contain malicious code...

Malicious code in buffered-logger-heroku (npm)

The package buffered-logger-heroku was found to contain malicious code...

com.jcabi:jcabi-aspects (>=0.7.4, <=0.7.7), com.jcabi:jcabi-heroku-maven-plugin (>=0.7.4, <=0.7.7) +3 more potentially affected by CVE-2025-35036 via org.hibernate:hibernate-validator (5.0.0.alpha2)

org.hibernate:hibernate-validator MAVEN version 5.0.0.alpha2 is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-validator and may be impacted: - com.jcabi:jcabi-aspects =0.7.4, =0.7.4, =0.4.5, =2.0-m11, =2.0-m12 Source cves:...

com.jcabi:jcabi-aspects (0.7.14), com.jcabi:jcabi-heroku-maven-plugin (0.7.14) +2 more potentially affected by CVE-2025-35036 via org.hibernate:hibernate-validator (5.0.0.cr2)

org.hibernate:hibernate-validator MAVEN version 5.0.0.cr2 is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-validator and may be impacted: - com.jcabi:jcabi-aspects 0.7.14 - com.jcabi:jcabi-heroku-maven-plugin 0.7.14 -...

CVE-2020-7634

heroku-addonpool through 0.1.15 is vulnerable to Command Injection...

com.heroku.sdk:heroku-deploy (2.0.7), com.heroku.sdk:heroku-maven-plugin (2.0.7) +36 more potentially affected by CVE-2025-4949 via org.eclipse.jgit:org.eclipse.jgit (4.11.5.201810191925-r)

org.eclipse.jgit:org.eclipse.jgit MAVEN version 4.11.5.201810191925-r is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jgit:org.eclipse.jgit and may be impacted: - com.heroku.sdk:heroku-deploy 2.0.7 - com.heroku.sdk:heroku-maven-plugin 2.0.7...