EUVD-2024-19963

Malicious code in bioql PyPI...

Cross site scripting

Creditcoin is a network that enables cross-blockchain credit transactions. The Windows binary of the Creditcoin node loads a suite of DLLs provided by Microsoft at startup. If a malicious user has access to overwrite the program files directory it is possible to replace these DLLs and execute...

CVE-2024-22410

In Creditcoin, the Windows node binary loads a set of Microsoft DLLs at startup. The vulnerability arises if an attacker can overwrite the program files directory, allowing replacement of these DLLs and arbitrary code execution via a binary planting attack. The issue is tied to DLLs from the Wind...