upgrade_handle.php on NUUO NVRmini devices allows Remote Command Execution via shell metacharacters in the uploaddir parameter for a writeuploaddir command.
Published: 2018-08-04
CVSS: 10.0
CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Download Exploit for CVE-2018-14933 here:
Use Tor Browser to access .onion links.
Check our team here:
https://wednesfieldacademy.com/exploit-726-cve-2025-4517/
https://wednesfieldacademy.com/exploit-272-cve-2025-20125/
https://wednesfieldacademy.com/exploit-354-cve-2025-3576/
