CVE-2018-11523
upload.php on NUUO NVRmini 2 devices allows Arbitrary File Upload, such as upload of .php files.
EXPLOIT-DB: https://www.exploit-db.com/exploits/44794/
MISC: https://github.com/unh3x/just4cve/issues/1
CVE: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-11523
published: 29. 5. 2018