The vulnerability of the hybrid digital video recorder models HBF-09KD and HBF-16NK, which stems from the disclosure of system data in an area not authorized for control, allows intruders to gain unauthorized access to protected information.

The vulnerability of the hybrid digital video recorder models HBF-09KD and HBF-16NK lies in the exposure of system data to an area that is not authorized for control purposes. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

EUVD-2025-28752

Malicious code in bioql PyPI...

CVE-2025-6562: Improper Neutralization of Special Elements used in an OS Command

Certain hybrid DVR models HBF-09KD and HBF-16NK from Hunt Electronic have an OS Command Injection vulnerability, allowing remote attackers with regular privileges to inject arbitrary OS commands and execute them on the device...

CVE-2025-6561: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Certain hybrid DVR models HBF-09KD and HBF-16NK from Hunt Electronic have an Exposure of Sensitive Information vulnerability, allowing unauthenticated remote attackers to directly access a system configuration file and obtain plaintext administrator credentials...