themebleed

ThemeBleed Proof-of-Concept for CVE-2023-38146 "ThemeBleed" Usage: ThemeBleed.exe Commands: server - Runs the server maketheme - Generates a .theme file referencing the specified host makethemepack - Generates a .themepack file referencing the specified host Data files The binaries in data...

CVE-2023-38146-Poc

PoC para el exploit ThemeBleed CVE-2023-38146 Temas de Windows 11 Fuertemente inspirado por https://github.com/gabe-k/themebleed que solo funciona en Windows la razón por la que decidí escribir esto. Usé código modificado de impacket smbserver.py...

ThemeBleedPy

Un agradecimiento enorme a gabek por el PoC inicial en C, y por descubrir este CVE, esta es una recreación de su código en Python, reutilizando sus archivos de stage. Para ver el PoC inicial, visita su página aquí: https://github.com/gabe-k/themebleed ThemeBleedPy Una prueba de concepto en Python...

Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Microsoft

PoC for the ThemeBleed CVE-2023-38146 exploit Windows 11 Them...

Themebleed Windows 11 Themes Arbitrary Code Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Themebleed- Windows 11 Themes Arbitrary Code Execution CVE-2023-38146', 'Description' = %q When an unpatched Windows 11 host loads a theme file...

‘ThemeBleed’ flaw in Windows 11 Enables Code Execution

Threat Level Vulnerability Report For a detailed threat advisory, download the pdf file here Summary The CVE-2023-38146 vulnerability in Windows 11 allows remote attackers to execute arbitrary code, potentially compromising the affected systems security and integrity, and posing a significant...

ThemeBleed exploit is another reason to patch Windows quickly

Included in the September 2023 Patch Tuesday updates was a fix for a vulnerability which has been dubbed ThemeBleed. A Proof-of-Concept PoC exploit has been released by Gabe Kirkpatrick, one of the researchers acknowledged for reporting the vulnerability. The Common Vulnerabilities and Exposures...

Themebleed- Windows 11 Themes Arbitrary Code Execution CVE-2023-38146

When an unpatched Windows 11 host loads a theme file referencing an msstyles file, Windows loads the msstyles file, and if that file's PACKMEVERSION is 999, it then attempts to load an accompanying dll file ending in vrf.dll Before loading that file, it verifies that the file is signed. It does...

Microsoft Windows Multiple Vulnerabilities (KB5030219)

This host is missing an important security update according to Microsoft KB5030219 SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

CVE-2023-38146

creationtimestamp| type| source ---|---|--- 2023-09-12 20:29:23+00:00| seen| https://t.me/cibsecurity/70331 2023-09-14 12:39:51+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/5133 2023-09-14 12:49:46+00:00| published-proof-of-concept| https://t.me/arvinclub1/750 2023-09-14...

CVE-2023-38146

Windows Themes Remote Code Execution Vulnerability...

CVE-2023-38146 Windows Themes Remote Code Execution Vulnerability

...

CVE-2023-38146

CVE-2023-38146 (ThemeBleed) is a Windows 11 Theme loading RCE. Theme files reference an msstyles resource; when PACKME_VERSION is 999 Windows loads a signed dll for verification, then re-opens it for execution, creating a time-of-check/time-of-use race that an attacker can exploit by pointing to ...

KB5030219: Windows 11 version 22H2 Security Update (September 2023)

The remote Windows host is missing security update 5030219. It is, therefore, affected by multiple vulnerabilities - Windows Themes Remote Code Execution Vulnerability CVE-2023-38146 - Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability CVE-2023-35355 - Windows GDI Elevati...

KB5030217: Windows 11 version 21H2 Security Update (September 2023)

The remote Windows host is missing security update 5030217. It is, therefore, affected by multiple vulnerabilities - Windows Themes Remote Code Execution Vulnerability CVE-2023-38146 - Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability CVE-2023-35355 - Windows GDI Elevati...