CVE-2025-49052

CVE-2025-49052 affects WordPress plugin Netease Music up to version 3.2.1, with a Missing/Broken Access Control vulnerability (no explicit exploit details in the provided docs). Root cause: improper authorization checks enabling access control bypass. Impact: potential unauthorized access or acti...

CVE-2025-49052 WordPress Netease Music plugin <= 3.2.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Dariolee Netease Music netease-music allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Netease Music: from n/a through = 3.2.1...

CVE-2025-49052 WordPress Netease Music plugin <= 3.2.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Dariolee Netease Music allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Netease Music: from n/a through 3.2.1...

WordPress plugin Netease Music 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2025-33183 · Unknown · Dariolee Netease Music

Name of the Vulnerable Software and Affected Versions: Dariolee Netease Music versions n/a through 3.2.1 Description: A missing authorization flaw exists in Dariolee Netease Music due to incorrectly configured access control security levels. Recommendations: Update to a version later than 3.2.1...

WordPress Netease Music plugin <= 3.2.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin Netease Music versions = 3.2.1...

CVE-2025-45737

An issue in NetEase Hangzhou Network Co., Ltd NeacSafe64 Driver before v1.0.0.8 allows attackers to escalate privileges via sending crafted IOCTL commands to the NeacSafe64.sys component...

CVE-2025-45737

An issue in NetEase Hangzhou Network Co., Ltd NeacSafe64 Driver before v1.0.0.8 allows attackers to escalate privileges via sending crafted IOCTL commands to the NeacSafe64.sys component...

CVE-2025-45737

An issue in NetEase Hangzhou Network Co., Ltd NeacSafe64 Driver before v1.0.0.8 allows attackers to escalate privileges via sending crafted IOCTL commands to the NeacSafe64.sys component...

CVE-2025-45737

An issue in NetEase Hangzhou Network Co., Ltd NeacSafe64 Driver before v1.0.0.8 allows attackers to escalate privileges via sending crafted IOCTL commands to the NeacSafe64.sys component...

NeacSafe64 安全漏洞

NetEase NeacSafe64 is a driver from the Chinese company NetEase. A security vulnerability exists in NeacSafe64 versions prior to 1.0.0.8, which stems from improper handling of IOCTL commands and may result in elevated privileges...

CVE-2025-45737

An issue in NetEase Hangzhou Network Co., Ltd NeacSafe64 Driver before v1.0.0.8 allows attackers to escalate privileges via sending crafted IOCTL commands to the NeacSafe64.sys component...

CVE-2025-45737

CVE-2025-45737 involves the NeacSafe64 Driver (NeacSafe64.sys) from NetEase, with root cause described as improper handling of IOCTL commands in versions prior to 1.0.0.8. The issue enables privilege escalation via crafted IOCTLs and has a network attack vector with no user interaction required. ...

CVE-2023-47454

An Untrusted search path vulnerability in NetEase CloudMusic 2.10.4 for Windows allows local users to gain escalated privileges through the urlmon.dll file in the current working directory...

CVE-2012-1384

Unspecified vulnerability in the NetEase Pmail com.netease.rpmms application 0.5.0 and 0.5.2 for Android has unknown impact and attack vectors...

CVE-2012-1383

Unspecified vulnerability in the NetEase Reader com.netease.pris application 1.1.2 and 1.2.0 for Android has unknown impact and attack vectors...

CVE-2012-1385

Unspecified vulnerability in the NetEase WeiboHD com.netease.wbhd application 1.0.0 for Android has unknown impact and attack vectors...

CVE-2012-1381

Unspecified vulnerability in the NetEase CloudAlbum com.netease.cloudalbum application 2.0.0 and 2.2.0 for Android has unknown impact and attack vectors...

CVE-2024-12866

A local file inclusion vulnerability exists in netease-youdao/qanything version v2.0.0. This vulnerability allows an attacker to read arbitrary files on the file system, which can lead to remote code execution by retrieving private SSH keys, reading private files, source code, and configuration...

CVE-2024-8024

A CORS misconfiguration vulnerability exists in netease-youdao/qanything version 1.4.1. This vulnerability allows an attacker to bypass the Same-Origin Policy, potentially leading to sensitive information exposure. Properly implementing a restrictive CORS policy is crucial to prevent such securit...