CVE-2025-1338

CVE-2025-1338 This repository contains a proof-of-concept exploit script for CVE-2025-1338 1.Introduction to NUUO-Camera NUUO camera is a network video recorder NVR produced by NUUO Company in Taiwan Province, China. It is widely used in many fields such as retail, transportation, education,...

NUUO Camera <=20250203 - OS Command Injection Detection

NUUO Camera up to 20250203 contains a command injection caused by manipulation of the 'log' argument in /handleconfig.php, letting remote attackers execute arbitrary commands, exploit requires remote access. !/usr/bin/env python3 -- coding: utf-8 -- """NUUO Camera up to 20250203 contains a comman...

CVE-2025-1338: Improper Neutralization of Special Elements used in a Command

A vulnerability was found in NUUO Camera up to 20250203. It has been declared as critical. This vulnerability affects the function printfile of the file /handleconfig.php. The manipulation of the argument log leads to command injection. The attack can be initiated remotely. The exploit has been...

NUUO Camera injection vulnerability

NUUO Camera is a series of webcams from NUUO. An injection vulnerability exists in NUUO Camera 20250203 and earlier versions, which originates in the printfile function of /handleconfig.php with a command injection in the parameter log...