Skip to content

How to find Uniview NVR301-04S2-P4 devices

Latest Uniview NVR301-04S2-P4 vulnerability

Uniview has disclosed a vulnerability in their NVR301-04S2-P4 product.

CVE-2024-3850 is rated medium with CVSS score of 5.4 and allows an attacker to send a user a URL that if clicked on could execute malicious JavaScript in their browser.

What is the impact?

The affected product is vulnerable to reflected cross-site scripting attack (XSS). An attacker could send a user a URL that if clicked on could execute malicious JavaScript in their browser. This vulnerability also requires authentication before it can be exploited, so the scope and severity is limited. Also, even if JavaScript is executed, no additional benefits are obtained.

Are updates or workarounds available?

Uniview encourages users to obtain the fixed version, Uniview NVR-B3801.20.17.240507, and update. You may contact your local dealer, Uniview Service Hotline, or regional technical support for assistance.

How do I find potentially vulnerable systems with runZero?

From the Asset Inventory, use the following query to locate systems running potentially vulnerable software:

product:”NVR3%”

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About runZero
runZero, a network discovery and asset inventory solution, was founded in 2018 by HD Moore, the creator of Metasploit. HD envisioned a modern active discovery solution that could find and identify everything on a network–without credentials. As a security researcher and penetration tester, he often employed benign ways to get information leaks and piece them together to build device profiles. Eventually, this work led him to leverage applied research and the discovery techniques developed for security and penetration testing to create runZero.

Forgot your X/Twitter password? Here’s a short guide to X/Twitter password reset

After a long stint away from social media, it’s time to sit down and plug yourself back into the grid. You log into Facebook, nothing interesting there. Instagram – same stuff, different day. How about X/Twitter? What social faux pas has your favorite political figure committed today? You enter your username, a familiar password, and wait for your feed to pop up. Instead, you’re greeted by this message: “The password you entered did not match our records.”

In today’s fast-paced digital landscape, it’s not uncommon to forget a password or two. It happens to the best of us. But forgetting your X/Twitter password or getting it compromised can be particularly frustrating and disconcerting, especially given the platform’s history of data breaches.

So, whether you’ve forgotten your password or your login details are compromised, or maybe you want to keep on top of your security – this guide is here to get you through changing or resetting your X/Twitter password as painlessly as possible.

How to change your X/Twitter password

Luckily, if you already know your password and merely want to change it to keep up with your account security, changing your password is an easy and swift process.

  1. Log into X/Twitter.

  2. Click “More” at the bottom of the dashboard on the left.

  3. Now select “Settings and privacy.”

  4. Click “Your account” and select “Change your password.”

  5. Type your “Current password.”

  6. Now enter your new passwords twice and click “Save” to confirm the change

When creating a new password, you should be aware of the X/Twitter password requirements, which are designed to help you create a complex and unique password. The X/Twitter password requirements ask for a password to be at least 10 characters long with a mix of lower- and upper-case letters, numbers, as well as symbols. Additionally, users are asked not to use common dictionary words or phrases, which are predictable and easy to compromise.

How to reset your X/Twitter password

Resetting your X/Twitter password is a simple process, whether you’re using the desktop site or the mobile app on iOS or Android devices. However, you should be aware that the following instructions can only work if you’ve supplied an extra level of authentication when setting up the X/Twitter account. Here are a few different ways that you can reset your X/Twitter password:

Reset your X/Twitter password via email

To reset your X/Twitter password via email, you need to:

  1. Go to the X/Twitter login page or open the app on your mobile device.

  2. Click the “Forgot password?” link.

  3. Enter your email address, and click “Search.”

  4. Select “Send email” to receive a password reset link in your inbox.

  5. Check your email and click on the link provided in the password reset email from X/Twitter.

  6. Enter a new password, confirm it, and click “Submit” to complete the process.

Reset your X/Twitter password via SMS text message

To reset your X/Twitter password via SMS text message, you need to:

  1. Ensure that your phone number is linked to your X/Twitter account.

  2. Go to the X/Twitter login page or open the app on your mobile device.

  3. Click the “Forgot password?” link.

  4. Enter the phone number, associated with your X/Twitter account, and click “Search.”

  5. Select “Send SMS” to receive a password reset code via text message.

  6. Enter the code received in the SMS text message and click “Submit.”

  7. Enter a new password, confirm it, and click “Submit” to complete the process.

How to reset X/Twitter password without email or phone number

If you don’t have access to your email or phone number, follow these steps:

  1. Go to X/Twitter’s Help Center.

  2. Select “I need help resetting my password.”

  3. Complete the form with the required information. Provide all additional information about your account.

  4. X/Twitter support will review your request and may contact you for further information before resetting your password.

How to make your account more secure

Securing your X/Twitter account is crucial to protect your personal information and avoid unauthorized access. The following tips are designed to help you fortify the security of your X/Twitter account.

1. Enable password reset protection.

Enable the password reset protection feature on your X/Twitter account and add an extra layer of security when resetting your password. To enable this functionality, you need to:

  • Click on your profile icon and select “Settings and privacy.”

  • Choose “Account” and then click on “Security settings.”

  • Toggle on the “Password reset protection” option.

  • Save the changes.

With this feature enabled, you’ll be required to provide additional information when attempting a password reset, making it more difficult for hackers to gain access to your account.

2. Set up two-factor authentication (2FA).

Two-factor authentication is a powerful security measure that requires you to provide a second form of identification when logging in, such as a code sent to your mobile device. This makes it much harder for someone to access your account, even if they know your password. To set up 2FA on X/Twitter:

  • Click on your profile icon and select “Settings and privacy.”

  • Choose “Account” and then click on “Security settings.”

  • Click “Two-factor authentication” and choose your preferred method (text message, authentication app, or security key).

  • Follow the on-screen instructions to complete the setup process.

By implementing 2FA, you’ll enjoy greater peace of mind knowing your account has an additional layer of protection.

3. Watch out for fake emails and phishing attempts.

Cybercriminals often use phishing emails to trick unsuspecting users into providing sensitive information. These emails often look like they’re from X/Twitter. The sophistication of social engineering scams in recent years has skyrocketed. To avoid falling for such scams:

  • Verify the sender’s email address before opening any email that claims to be from X/Twitter.

  • Keep an eye out for inconsistencies in the email’s design, grammar, or links.

  • Never click on suspicious links or download attachments from unknown sources.

  • Never provide sensitive information via email, even if the message appears to be legitimate.

4. Switch to passkeys.

If you’re really serious about securing your X/Twitter account, it’s time to rethink your reliance on passwords. Instead, consider a safer alternative: passkeys. They represent a novel authentication approach that allows users to securely access their accounts and devices through passwordless methods such as biometrics, leveraging unique characteristics of individuals, including fingerprints, voice patterns, or even iris scans. In January 2024, X introduced passkey support for iOS devices, providing users with a more secure login option. So, if you own an iPhone or iPad, switch to passkeys and boost your online security today.

By following these tips and remaining vigilant, you’ll significantly improve the security of your X/Twitter account and enjoy a safer online experience.

Fortify your passwords using NordPass

In today’s digital era, the security of your passwords is a top priority and that is where NordPass can offer a lot of help. With NordPass, you can forget the hassle of remembering multiple passwords and enjoy a smoother browsing experience without compromising your security.

NordPass uses the XChaCha20 encryption technology to deliver unmatched security for your passwords. This advanced encryption ensures that your passwords and other sensitive information remain secure at all times.

In addition to helping you secure and use passwords more effectively, NordPass also lets you bid farewell to passwords altogether for even greater security and convenience. This is made possible thanks to NordPass’s support for passkeys. With them, you can quickly and safely log in to your online accounts without passwords. Instead, you can use, for example, a fingerprint scanner or other biometric tools to get instant access.

NordPass also enhances your online experience through its autosave and autofill features. When setting up a new account or updating your password, NordPass seamlessly saves the information in your encrypted vault.

The Autofill function guarantees you’ll never have to manually type out your login details again. Once you’ve saved your login credentials in NordPass, the app will automatically populate the necessary fields when you return to the site. This not only saves time but also mitigates the risk of typing blunders that could result in losing access to your account.

These days, a password manager is an essential tool for anyone who wishes to remain secure online. Secure your digital life by making NordPass an integral security tool in your toolbox. Try it now, and discover how smooth and secure life online can be with NordPass.

About Version 2 Digital

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

About NordPass
NordPass is developed by Nord Security, a company leading the global market of cybersecurity products.

The web has become a chaotic space where safety and trust have been compromised by cybercrime and data protection issues. Therefore, our team has a global mission to shape a more trusted and peaceful online future for people everywhere.

我的帳號被盗用嗎? 一個免費工具讓你立即檢查


最近有一份報告,詳細介紹了近日發生的資料洩漏事件,其中包括 LinkedIn、Twitter(現為 X)和其他各種公司和網絡服務遭受的多次攻擊。據報導,這些事件共涉及驚人的 260 億條記錄,其中包括各種敏感信息、政府數據和使用者的登錄憑證。

儘管這不是首次出現大量使用者數據被盜取的情況,但這次受影響的記錄數量超過了之前已知的洩漏事件。回顧一下,2020 年著名的 Cam4 數據洩漏事件暴露了近 110 億條記錄,而 2013 年雅虎的漏洞則破壞了 30 億個使用者帳號。此外,2019 年的 Collection No.1 數據洩漏事件在互聯網上公開了 7.73 億個登錄名稱和密碼。

這讓我們陷入了一個困境,即使你採取了嚴格的個人安全措施,你的帳號憑證仍然可能在這樣的攻擊中被獲取,而這主要是因為大公司出現的漏洞。這引出了一個問題:如何確定自己的憑證是否被盜用?

目前最簡單的方法之一是檢查你的某些數據(如電子郵件地址或任何密碼)是否曾在數據洩漏事件中曝光,你可以使用 haveibeenpwned.com 這個網站。該網站提供了一個免費工具,可以告訴你的數據是否出現在已知的數據洩漏事件中。

只需輸入你的電子郵件地址或使用者名稱,haveibeenpwned.com 將檢查這些信息是否出現在已知的數據洩漏事件中。如果你的數據已經洩漏,它將提供相關的信息,例如哪個網站或服務遭受了洩漏,以及你的數據何時被洩漏。這是一個受歡迎且可靠的網站,由安全研究人員 Troy Hunt 運營。

 

About Version 2

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products. Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

關於ESET
ESET成立於1992年,是一家面向企業與個人用戶的全球性的電腦安全軟件提供商,其獲獎產品 — NOD32防病毒軟件系統,能夠針對各種已知或未知病毒、間諜軟件 (spyware)、rootkits和其他惡意軟件為電腦系統提供實時保護。ESET NOD32佔用 系統資源最少,偵測速度最快,可以提供最有效的保護,並且比其他任何防病毒產品獲得了更多的Virus Bulletin 100獎項。ESET連續五年被評為“德勤高科技快速成長500 強”(Deloitte’s Technology Fast 500)公司,擁有廣泛的合作夥伴網絡,包括佳能、戴爾、微軟等國際知名公司,在布拉迪斯拉發(斯洛伐克)、布裏斯托爾(英國 )、布宜諾斯艾利斯(阿根廷)、布拉格(捷克)、聖地亞哥(美國)等地均設有辦事處,代理機構覆蓋全球超過100個國家。

我的帳號被盗用嗎? 一個免費工具讓你立即檢查


最近有一份報告,詳細介紹了近日發生的資料洩漏事件,其中包括 LinkedIn、Twitter(現為 X)和其他各種公司和網絡服務遭受的多次攻擊。據報導,這些事件共涉及驚人的 260 億條記錄,其中包括各種敏感信息、政府數據和使用者的登錄憑證。

儘管這不是首次出現大量使用者數據被盜取的情況,但這次受影響的記錄數量超過了之前已知的洩漏事件。回顧一下,2020 年著名的 Cam4 數據洩漏事件暴露了近 110 億條記錄,而 2013 年雅虎的漏洞則破壞了 30 億個使用者帳號。此外,2019 年的 Collection No.1 數據洩漏事件在互聯網上公開了 7.73 億個登錄名稱和密碼。

這讓我們陷入了一個困境,即使你採取了嚴格的個人安全措施,你的帳號憑證仍然可能在這樣的攻擊中被獲取,而這主要是因為大公司出現的漏洞。這引出了一個問題:如何確定自己的憑證是否被盜用?

目前最簡單的方法之一是檢查你的某些數據(如電子郵件地址或任何密碼)是否曾在數據洩漏事件中曝光,你可以使用 haveibeenpwned.com 這個網站。該網站提供了一個免費工具,可以告訴你的數據是否出現在已知的數據洩漏事件中。

只需輸入你的電子郵件地址或使用者名稱,haveibeenpwned.com 將檢查這些信息是否出現在已知的數據洩漏事件中。如果你的數據已經洩漏,它將提供相關的信息,例如哪個網站或服務遭受了洩漏,以及你的數據何時被洩漏。這是一個受歡迎且可靠的網站,由安全研究人員 Troy Hunt 運營。

 

About Version 2

Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products. Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

關於ESET
ESET成立於1992年,是一家面向企業與個人用戶的全球性的電腦安全軟件提供商,其獲獎產品 — NOD32防病毒軟件系統,能夠針對各種已知或未知病毒、間諜軟件 (spyware)、rootkits和其他惡意軟件為電腦系統提供實時保護。ESET NOD32佔用 系統資源最少,偵測速度最快,可以提供最有效的保護,並且比其他任何防病毒產品獲得了更多的Virus Bulletin 100獎項。ESET連續五年被評為“德勤高科技快速成長500 強”(Deloitte’s Technology Fast 500)公司,擁有廣泛的合作夥伴網絡,包括佳能、戴爾、微軟等國際知名公司,在布拉迪斯拉發(斯洛伐克)、布裏斯托爾(英國 )、布宜諾斯艾利斯(阿根廷)、布拉格(捷克)、聖地亞哥(美國)等地均設有辦事處,代理機構覆蓋全球超過100個國家。

×

Hello!

Click one of our contacts below to chat on WhatsApp

×