terrier

Terrier Terrier est un outil d'analyse d'images et de conteneurs qui peut être utilisé pour scanner des images OCI et des conteneurs afin d'identifier et de vérifier la présence de fichiers spécifiques en fonction de leurs empreintes. Une description détaillée de Terrier est disponible sur le blo...

heroku-CVE-2013-0333

heroku-CVE-2013-0333 Проверьте все свои приложения heroku на предмет уязвимой версии Rails Предыстория Серьёзная уязвимость в безопасности была обнаружена в фреймворке Ruby on Rails. Эта эксплойт затрагивает почти все приложения, работающие на версии Rails 2.3 и 3.0, и патч уже выпущен...

heroku-CVE-2022-44268-reproduction

Ce depot n’a pas de fichier README...

heroku-CVE-2013-0269

heroku-CVE-2013-0269 Inspectez toutes vos applications heroku pour voir si elles exécutent une version vulnérable de JSON Contexte Une vulnérabilité de sécurité a été découverte dans le gem JSON de Ruby. C'est la cause racine du problème d'injection MySQL récemment annoncé dans Rails. Une nouvell...

heroku-CVE-2013-0156

heroku-CVE-2013-0156 この脆弱性はCVE-2013-0333に取って代わられました。詳細については、https://groups.google.com/forum/?fromgroups=!topic/rubyonrails-security/1h2DR63ViGo を参照してください。 このスクリプトの代替品（CVE-2013-0333に対応）は、https://github.com/heroku/heroku-CVE-2013-0333 にあります。...

flask_heroku_redirector

Flask Heroku C2 Пример Простое приложение на Python Flask, готовое к запуску на Heroku. Настройка разработки virtualenv venv source venv/bin/activate pip install -r requirements.txt python app.py Развёртывание heroku create git push heroku master...

tko-subs

tko-subs This tool allows: To check whether a subdomain can be taken over because it has: a dangling CNAME pointing to a CMS provider Heroku, Github, Shopify, Amazon S3, Amazon CloudFront, etc. that can be taken over. a dangling CNAME pointing to a non-existent domain name one or more wrong/typoe...

subjack

subjack DNS Takeover Scanner Subjack is a DNS takeover scanner written in Go designed to scan a list of domains concurrently and identify ones that are able to be hijacked. With Go's speed and efficiency, this tool really stands out when it comes to mass-testing. Always double check the results...

vulnreport

Abandoned Project This project is not currently maintained and has been abandoned. Vulnreport Pentesting management and automation platform Vulnreport is a platform for managing penetration tests and generating well-formatted, actionable findings reports without the normal overhead that takes up...

PowMix botnet targets Czech workforce

Cisco Talos discovered an ongoing malicious campaign, operating since at least December 2025, affecting a broader workforce in the Czech Republic with a previously undocumented botnet we call "PowMix." PowMix employs randomized command-and-control C2 beaconing intervals, rather than persistent...

EUVD-2021-2433

Malware in sbrugna...

EUVD-2022-6579

Malicious code in bioql PyPI...

Malicious code in heroku-sudo (npm)

The package heroku-sudo was found to contain malicious code...

Malicious code in buffered-logger-heroku (npm)

The package buffered-logger-heroku was found to contain malicious code...

MAL-2025-22399 Malicious code in heroku-sudo (npm)

The package heroku-sudo was found to contain malicious code...

MAL-2025-16305 Malicious code in buffered-logger-heroku (npm)

The package buffered-logger-heroku was found to contain malicious code...

CVE-2020-7634

heroku-addonpool through 0.1.15 is vulnerable to Command Injection...

Malicious code in heroku-tl (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8a78aff2389300306864bb3d44e1ac70675e128845a4d734dae5ffbc39076b93 Clone of a legit Telegram client, with a hidden code that, under some conditions, can attempt to destroy the Linux OS. --- Category: MALICIOUS - The campaign h...

MAL-2025-2967 Malicious code in heroku-tl (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8a78aff2389300306864bb3d44e1ac70675e128845a4d734dae5ffbc39076b93 Clone of a legit Telegram client, with a hidden code that, under some conditions, can attempt to destroy the Linux OS. --- Category: MALICIOUS - The campaign h...

A Bootiful Podcast: Heroku's Terence Lee

Hi, Spring fans! Happy Spring Boot 3.4.0 release day to those who celebrate! Today I'm joined by both Terence Lee, from Heroku, and my friend DaShaun Carter, and we talk about platforms, buildpacks, and more. heroku paas buildpacks,...