CVE-2016-5674

The exploit demonstrates multiple vulnerabilities in NUUO NVR devices and NETGEAR ReadyNAS Surveillance, including unauthenticated remote code execution via improper input validation in PHP files. Proofs of concept include command injection via GET parameters to achieve reverse shells as root or admin.

This Metasploit module exploits an unauthenticated remote code execution vulnerability in NUUO NVRmini 2 and NETGEAR ReadyNAS Surveillance via a command injection in the `__debugging_center_utils__.php` endpoint. It handles different payload constraints for each target and executes commands as root or admin.