
u/throwaway_for_study

Appreciation for CERT-In: Found an IDOR in an admissions portal and reported it to them. it actually got fixed.
a few days ago, while looking at the CMAC admissions portal (jointly run by DTU, NSUT and IGDTUW), I found an IDOR/BOLA vulnerability caused by a missing server-side ownership check.
the issue could allow someone to access other applicants’ records and uploaded documents. the exposed information included CBSE class 10 and 12 records, marksheets, NTA CUET-UG admit cards, photographs, signatures, and contact details. of over 6k+ applicants.
i reported it responsibly through CERT-In. they coordinated with the organisation, the vulnerability was fixed, and i later retested the endpoint to confirm that the patch worked.
i appreciate CERT-In for helping the report reach the right people and ensuring that the issue was addressed.
i’ve attached a few redacted screenshots, but i’m not sharing the endpoint, PoC, or any sensitive information. the IDs being predictable wasn’t the vulnerability by itself.
the actual problem was that the server returned an object without first checking whether the requester was authorised to access it.
it felt good to see the report reach the right people and result in a real fix. thank you to CERT-In and everyone involved in resolving it.
URGENT PLIZ HELP
does anyone know the last date for admission to SCMS pune AND NMIMS bengaluru. so that if I cancel I get 100% refund. I couldn't find much on their sites. ik the last date for fee payment is 27 june. jaldi koi help kardo with source pls 🥀🙏
SCMS PI Transcript (1 June Afternoon)
some madam asked for my name, SET ID, PI ID, and Aadhar Card.
Interviewer 1: Good afternoon.
Candidate: Good afternoon.
Interviewer 1: Have you had lunch?
Candidate: Yes.
Interviewer 1: Where are you joining us from?
Candidate: (told)
Interviewer 1: Tell us five special things about your city.
Candidate: (told)
Interviewer 1: Tell us about your Class 12 scores and SET score.
Candidate: I completed Class 12 with Physics, Chemistry, Mathematics, and Computer Science. (told about SET score)
(then asked about things written in my cv)
Interviewer 1: You said you learn from both successes and setbacks. Can you share a setback that you overcame?
Candidate: (told)
Interviewer 1: Have you accomplished anything significant that you'd like to share?
Candidate: (told and had shown certificates of ECAs)
Interviewer 1: Congratulations. Anything else you'd like to share?
Candidate: (told more ECAs)
Interviewer 1: Tell us more.
Candidate: (told)
Interviewer 1: Was this your own initiative?
Candidate: Yes.
(start vague questions, and my answers to them.)
Interviewer 1: Are you more of a leader or a team player?
Candidate: It depends on the situation. I enjoy both leading and collaborating.
Interviewer 1: Tell us three leadership qualities you possess.
Candidate: Remaining calm during difficult situations, maintaining team morale, and coordinating effectively with team members.
Interviewer 1: How is knowledge different from an idea?
Candidate: Knowledge provides the foundation for ideas. Having knowledge of a domain enables meaningful ideas to emerge.
Interviewer 1: I'll ask a few simple questions. "Think Different" is the tagline of which company?
Candidate: I can't recall at the moment.
Interviewer 1: "The Taste of India."
Candidate: Amul.
Interviewer 1: What is the full form of Amul?
Candidate: Anand Milk Union Limited.
Interviewer 1: "The Bank to Every Indian."
Candidate: State Bank of India.
Interviewer 1: What's the difference between a debit card and a credit card?
Candidate: A debit card uses money from your own bank account, whereas a credit card allows you to spend the bank's money and repay it later.
Interviewer 1: What is a CVV number?
Candidate: A three-digit security code on the back of a payment card.
Interviewer 1: What is an ATM?
Candidate: A machine used to access banking services, including cash withdrawal.
Interviewer 1: Name five apps you use.
Candidate: Google Pay, Instagram, Reddit, Gmail, and Google.
Interviewer 1: Who can use Google Pay?
Candidate: Anyone with a bank account and a UPI-enabled payment setup.
-----------------------------------------------------------------------------------------
(A sir who was present in the meet now speaks.)
Interviewer 2: Good afternoon. How are you doing?
Candidate: I'm fine, thank you.
Interviewer 2: Why should we select you?
Candidate: I believe I would contribute positively to the institution's culture, ecosystem, and peer community.
Interviewer 2: What is cybercrime, and what is cybersecurity?
Candidate: (told)
Interviewer 2: Thank you very much.
Interviewer 1: You may log off now. All the best.
Candidate: Thank you.
(logs off)
----------------------------------------------------------------------------------------------
overall a very nice and friendly panel. no academic questions were asked. didn't prep for the interview.
SET Score: 44
how to prepare for SSE interview
suit pehen na hoga ya t shirt pehen sakte hai 🥀
IIM 😍🔥X Hookah Bar edit | IIM motivation lpmat motivation | #iim #ipmat status #letscrackit #igoontopyqs
I've seen IPMAT crack people in hours, I've also seen IPMAT finishing early. we need to know your retention. attempt a diagnostic crack session on 4th May and tell the scores.