{"vulnerability": "CVE-2007-1858", "sightings": [{"uuid": "0051e750-eb89-4e5e-b001-2f17338a88fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2007-1858", "type": "seen", "source": "https://t.me/arpsyndicate/658", "content": "#ExploitObserverAlert\n\nCVE-2007-1858\n\nDESCRIPTION: Exploit Observer has 43 entries related to CVE-2007-1858. The default SSL cipher configuration in Apache Tomcat 4.1.28 through 4.1.31, 5.0.0 through 5.0.30, and 5.5.0 through 5.5.17 uses certain insecure ciphers, including the anonymous cipher, which allows remote attackers to obtain sensitive information or have other, unspecified impacts.\n\nFIRST-EPSS: 0.004720000\nNVD-IS: 2.9\nNVD-ES: 4.9", "creation_timestamp": "2023-11-28T14:51:08.000000Z"}, {"uuid": "cedab428-0ed9-4eef-930a-de19aa48c0ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2007-1858", "type": "seen", "source": "https://t.me/information_security_channel/10087", "content": "Spaghetti is an Open-source Web Application Security Scanner, it is designed to find various default and insecure files, configurations, and misconfigurations.\n\nIt is built on Python 2.7 and can run on any platform which has a Python environment.\nFeatures of Spaghetti Web Application Security Scanner\nFingerprints\nServer\nWeb Frameworks (CakePHP, CherryPy,\u2026)\nWeb Application Firewall (Waf)\nContent Management System (CMS)\nOperating System (Linux, Unix,..)\nLanguage (PHP, Ruby,\u2026)\nCookie Security\n\nBruteforce\nAdmin Interface\nCommon Backdoors\nCommon Backup Directory\nCommon Backup File\nCommon Directory\nCommon File\nLog File\n\nDisclosure\nEmails\nPrivate IP\nCredit Cards\n\nAttacks\nHTML Injection\nSQL Injection\nLDAP Injection\nXPath Injection\nCross Site Scripting (XSS)\nRemote File Inclusion (RFI)\nPHP Code Injection\n\nOther\nHTTP Allow Methods\nHTML Object\nMultiple Index\nRobots Paths\nWeb Dav\nCross Site Tracing (XST)\nPHPINFO\n.Listing\n\nVulns\nShellShock\nAnonymous Cipher (CVE-2007-1858)\nCrime (SPDY) (CVE-2012-4929)\nStruts-Shock\n\nUsing Spaghetti Web Application Security Scanner\nroot@darknet:~/Spaghetti# python spaghetti.py\n\n  _____             _       _   _   _\n\n |   __|___ ___ ___| |_ ___| |_| |_|_|\n\n |__   | .\nRead the rest of Spaghetti Download \u2013 Web Application Security Scanner now! Only available at Darknet. (https://www.darknet.org.uk/2017/10/spaghetti-download-web-application-security-scanner/)", "creation_timestamp": "2017-10-17T20:54:29.000000Z"}, {"uuid": "8af27373-99bf-456d-8398-3ee00ab7cfee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2007-1858", "type": "seen", "source": "https://t.me/information_security_channel/9760", "content": "A2SV is a Python-based SSL Vulnerability focused tool that allows for auto-scanning and detection of the common and well-known SSL Vulnerabilities.\n\nSSL Vulnerabilities Detected by A2SV\n[CVE-2007-1858] Anonymous Cipher\n[CVE-2012-4929] CRIME(SPDY)\n[CVE-2014-0160] CCS Injection\n[CVE-2014-0224] HeartBleed\n[CVE-2014-3566] SSLv3 POODLE\n[CVE-2015-0204] FREAK Attack\n[CVE-2015-4000] LOGJAM Attack\n[CVE-2016-0800] SSLv2 DROWN\nPlanned for future:\n[PLAN] SSL ACCF\n[PLAN] SSL Information Analysis\nInstallation & Requirements for A2SV\nA.\nRead the rest of A2SV \u2013 Auto Scanning SSL Vulnerability Tool For Poodle & Heartbleed now! Only available at Darknet. (https://www.darknet.org.uk/2017/10/a2sv-auto-scanning-ssl-vulnerability-tool-poodle-heartbleed/)", "creation_timestamp": "2017-10-09T18:29:26.000000Z"}, {"uuid": "e802418d-8e97-46e4-b634-a6bc9391fe63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2007-1858", "type": "seen", "source": "https://t.me/FullSecurity/1758", "content": "\u2714 \u0627\u0628\u0632\u0627\u0631 Spaghetti\n\u0627\u06cc\u0646 \u0627\u0628\u0632\u0627\u0631 \u0628\u0631\u0627\u06cc \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u0647\u0627\u06cc \u0648\u0628 \u0633\u0627\u06cc\u062a \u0648 \u0647\u0645\u0686\u0646\u06cc\u0646 \u062c\u0645\u0639 \u0622\u0648\u0631\u06cc \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u06a9\u0627\u0631\u0628\u0631\u062f \u062f\u0627\u0631\u0647.\n\u0642\u0627\u0628\u0644\u06cc\u062a \u0647\u0627 :\n\n\u2705Fingerprints\n\n  Server\n  Web Frameworks (CakePHP, CherryPy,\u2026)\n  Web Application Firewall (Waf)\n  Content Management System (CMS)\n  Operating System (Linux, Unix,..)\n  Language (PHP, Ruby,\u2026)\n  Cookie Security\n\n\u2705Bruteforce\n\n  Admin Interface\n  Common Backdoors\n  Common Backup Directory\n  Common Backup File\n  Common Directory\n  Common File\n  Log File\n\n\u2705Disclosure\n\n  Emails\n  Private IP\n  Credit Cards\n\n\u2705Attacks\n\n  HTML Injection\n  SQL Injection\n  LDAP Injection\n  XPath Injection\n  Cross Site Scripting (XSS)\n  Remote File Inclusion (RFI)\n  PHP Code Injection\n\n\u2705Other\n\n  HTTP Allow Methods\n  HTML Object\n  Multiple Index\n  Robots Paths\n  Web Dav\n  Cross Site Tracing (XST)\n  PHPINFO\n  .Listing\n\n\u2705Vulns\n\n  ShellShock\n  Anonymous Cipher (CVE-2007-1858)\n  Crime (SPDY) (CVE-2012-4929)\n  Struts-Shock\n\n\u0628\u0639\u062f \u0627\u0632 \u062f\u0627\u0646\u0644\u0648\u062f \u0628\u0647 \u067e\u0648\u0634\u0647 \u0627\u06cc\u0646 \u0627\u0628\u0632\u0627\u0631 \u0628\u0631\u06cc\u062f \u0648 \u062f\u0633\u062a\u0648\u0631 \u0632\u06cc\u0631 \u0631\u0648 \u0628\u0632\u0646\u06cc\u062f:\n\npip install -r requirements.txt\n\n\u0628\u0631\u0627\u06cc \u0627\u0633\u06a9\u0646 \u062a\u0627\u0631\u06af\u062a \u0647\u0645 \u0627\u0632 \u062f\u0633\u062a\u0648\u0631 \u0632\u06cc\u0631 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0646\u06cc\u062f:\n\npython spaghetti.py --url target.br --scan 0 --random-agent --verbose\n\n\u3030\u3030\u3030\u3030\u3030\u3030\u3030\nAli Ghanbari\n@exploiter007\n\u3030\u3030\u3030\u3030\u3030\u3030\u3030\n\u2b05 \u0628\u0631\u062a\u0631\u064a\u0646 \u0643\u0627\u0646\u0627\u0644 \u0627\u0645\u0646\u064a\u062a \u062f\u0631 \u0627\u064a\u0631\u0627\u0646\n@FullSecurity", "creation_timestamp": "2026-07-26T07:02:20.872373Z"}, {"uuid": "a6d98197-5343-4443-8b40-a58ec95e8309", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2007-1858", "type": "seen", "source": "https://t.me/FullSecurity/1758", "content": "\u2714 \u0627\u0628\u0632\u0627\u0631 Spaghetti\n\u0627\u06cc\u0646 \u0627\u0628\u0632\u0627\u0631 \u0628\u0631\u0627\u06cc \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u0647\u0627\u06cc \u0648\u0628 \u0633\u0627\u06cc\u062a \u0648 \u0647\u0645\u0686\u0646\u06cc\u0646 \u062c\u0645\u0639 \u0622\u0648\u0631\u06cc \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u06a9\u0627\u0631\u0628\u0631\u062f \u062f\u0627\u0631\u0647.\n\u0642\u0627\u0628\u0644\u06cc\u062a \u0647\u0627 :\n\n\u2705Fingerprints\n\n  Server\n  Web Frameworks (CakePHP, CherryPy,\u2026)\n  Web Application Firewall (Waf)\n  Content Management System (CMS)\n  Operating System (Linux, Unix,..)\n  Language (PHP, Ruby,\u2026)\n  Cookie Security\n\n\u2705Bruteforce\n\n  Admin Interface\n  Common Backdoors\n  Common Backup Directory\n  Common Backup File\n  Common Directory\n  Common File\n  Log File\n\n\u2705Disclosure\n\n  Emails\n  Private IP\n  Credit Cards\n\n\u2705Attacks\n\n  HTML Injection\n  SQL Injection\n  LDAP Injection\n  XPath Injection\n  Cross Site Scripting (XSS)\n  Remote File Inclusion (RFI)\n  PHP Code Injection\n\n\u2705Other\n\n  HTTP Allow Methods\n  HTML Object\n  Multiple Index\n  Robots Paths\n  Web Dav\n  Cross Site Tracing (XST)\n  PHPINFO\n  .Listing\n\n\u2705Vulns\n\n  ShellShock\n  Anonymous Cipher (CVE-2007-1858)\n  Crime (SPDY) (CVE-2012-4929)\n  Struts-Shock\n\n\u0628\u0639\u062f \u0627\u0632 \u062f\u0627\u0646\u0644\u0648\u062f \u0628\u0647 \u067e\u0648\u0634\u0647 \u0627\u06cc\u0646 \u0627\u0628\u0632\u0627\u0631 \u0628\u0631\u06cc\u062f \u0648 \u062f\u0633\u062a\u0648\u0631 \u0632\u06cc\u0631 \u0631\u0648 \u0628\u0632\u0646\u06cc\u062f:\n\npip install -r requirements.txt\n\n\u0628\u0631\u0627\u06cc \u0627\u0633\u06a9\u0646 \u062a\u0627\u0631\u06af\u062a \u0647\u0645 \u0627\u0632 \u062f\u0633\u062a\u0648\u0631 \u0632\u06cc\u0631 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0646\u06cc\u062f:\n\npython spaghetti.py --url target.br --scan 0 --random-agent --verbose\n\n\u3030\u3030\u3030\u3030\u3030\u3030\u3030\nAli Ghanbari\n@exploiter007\n\u3030\u3030\u3030\u3030\u3030\u3030\u3030\n\u2b05 \u0628\u0631\u062a\u0631\u064a\u0646 \u0643\u0627\u0646\u0627\u0644 \u0627\u0645\u0646\u064a\u062a \u062f\u0631 \u0627\u064a\u0631\u0627\u0646\n@FullSecurity", "creation_timestamp": "2026-07-27T00:01:57.475582Z"}]}