References https://nvd.nist.gov/vuln/detail/CVE-2025-1338 https://www.sentinelone.com/vulnerability-database/cve-2025-1338/ https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-1338.yaml https://advisories.checkpoint.com/defense/advisories/public/2025/cpai-2025-3431.html/ https://sploitus.com/exploit?id=193DC0AC-1033-59D3-BF17-BAFB42F8C93C https://cvefeed.io/vuln/detail/CVE-2025-1338 https://www.cvedetails.com/cve/CVE-2025-1338/ https://vuldb.com/vuln/295954 https://github.com/advisories/GHSA-vw58-vgp6-39qx https://dbugs.ptsecurity.com/vulnerability/CVE-2025-1338
Related VulnerabilitiesPoCNUUO NVR 摄像机 /handle_config.php 命令执行漏洞PoCCVE-2025-1338: NUUO Camera <=20250203 - OS Command InjectionPoCCVE-2016-5674: NUUO NVR camera `debugging_center_utils_.php` - Command ExecutionPoCCVE-2018-14933: NUUO NVRmini - Remote Command ExecutionPoCCVE-2022-33119: NUUO NVRsolo Video Recorder 03.06.02 - Cross-Site ScriptingPoCCVE-2016-5674: NUUO NVR 摄像机 debugging_center_utils_.php 命令执行漏洞PoCnuuo-file-inclusion: Nuuo file inclusionPoCnuuo-nvr-default-login: NUUO NVR - Default LoginPoCnuuo-file-inclusion: NUUO NVRmini 2 3.0.8 - Local File InclusionNUUO摄像机 /handle_site_config.php 远程代码执行漏洞(CVE-2025-1338)NUUO摄像机handle_site_config远程代码执行漏洞NUUO摄像头 /upload.php 文件上传漏洞