NUUO NVRmini 2 3.0.8 - Remote Code Execution
This exploit leverages an unauthenticated command injection vulnerability in NUUO NVRmini devices via an undocumented debugging script. It creates a backdoor PHP file and allows arbitrary command execution as root.