upload.php on NUUO NVRmini 2 devices allows Arbitrary File Upload, such as upload of .php files.
nuuo nvrmini_2_firmware