PageSourceSearch

https://z-aki.github.io/vuln/

html z-aki.github.io collected 2026-10-03 10:14:04 UTC 66,237 bytes, 1,963 lines download raw bytes

1<html lang="en" class="no-js">
2  <head>
3    
4      <meta charset="utf-8">
5      <meta name="viewport" content="width=device-width,initial-scale=1">
6      
7        <meta name="description" content="z-aki">
8      
9      
10        <meta name="author" content="z-aki">
11      
12      
13        <link rel="canonical" href="https://z-aki.github.io/vuln/">
14      
15      
16        <link rel="prev" href="..">
17      
18      
19        <link rel="next" href="../digipin/tool/">
20      
21      
22        <link rel="alternate" type="application/rss+xml" title="RSS feed" href="../feed_rss_created.xml">
23        <link rel="alternate" type="application/rss+xml" title="RSS feed of updated content" href="../feed_rss_updated.xml">
24      
25      <link rel="icon" href="../assets/images/favicon.png">
26      <meta name="generator" content="mkdocs-1.6.1, mkdocs-material-9.6.15">
27    
28    
29      
30        <title>Vulnerability Analysis and disclosures - z-aki</title>
31      
32    
33    
34      <link rel="stylesheet" href="../assets/stylesheets/main.342714a4.min.css">
35      
36        
37        <link rel="stylesheet" href="../assets/stylesheets/palette.06af60db.min.css">
38      
39      
40
41
42    
43    
44      
45    
46    
47      
48    
49    
50      <link rel="stylesheet" href="../stylesheets/extra.css">
51    
52    
52<script>__md_scope=new URL("..",location),__md_hash=e=>[...e].reduce(((e,_)=>(e<<5)-e+_.charCodeAt(0)),0),__md_get=(e,_=localStorage,t=__md_scope)=>JSON.parse(_.getItem(t.pathname+"."+e)),__md_set=(e,_,t=localStorage,a=__md_scope)=>{try{t.setItem(a.pathname+"."+e,JSON.stringify(_))}catch(e){}}</script>
52
53    
54      
55
56    
57    
58    
59<meta name="google-site-verification" content="kr2DtrgRhBOa85JVr-UsAzDW-3fq0bRcpG1cWtJLT1o">
60<link rel="sitemap" type="application/xml" title="Sitemap" href="/sitemap.xml">
61
62  </head>
63  
64  
65    
66    
67    
68    
69    
70    <body dir="ltr" data-md-color-scheme="default" data-md-color-primary="teal" data-md-color-accent="indigo">
71  
72    
73    <input class="md-toggle" data-md-toggle="drawer" type="checkbox" id="__drawer" autocomplete="off">
74    <input class="md-toggle" data-md-toggle="search" type="checkbox" id="__search" autocomplete="off">
75    <label class="md-overlay" for="__drawer"></label>
76    <div data-md-component="skip">
77      
78        
79        <a href="#vulnerability-analysis-and-disclosures" class="md-skip">
80          Skip to content
81        </a>
82      
83    </div>
84    <div data-md-component="announce">
85      
86        <aside class="md-banner">
87          <div class="md-banner__inner md-grid md-typeset">
88            
89            
90Use RSS feed apps/extensions to get updates about new posts (without sharing your email). See <a href="/about#stay-updated">contact
91    me</a>.
92
93          </div>
94          
95        </aside>
96      
97    </div>
98    
99    
100      <!--
101  Copyright (c) 2016-2025 Martin Donath <[email protected]>
102
103  Permission is hereby granted, free of charge, to any person obtaining a copy
104  of this software and associated documentation files (the "Software"), to
105  deal in the Software without restriction, including without limitation the
106  rights to use, copy, modify, merge, publish, distribute, sublicense, and/or
107  sell copies of the Software, and to permit persons to whom the Software is
108  furnished to do so, subject to the following conditions:
109
110  The above copyright notice and this permission notice shall be included in
111  all copies or substantial portions of the Software.
112
113  THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
114  IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
115  FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL THE
116  AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
117  LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
118  FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS
119  IN THE SOFTWARE.
120-->
121
122<!-- Determine classes -->
123
124
125  
126
127
128<!-- Header -->
129<header class="md-header md-header--shadow md-header--lifted" data-md-component="header">
130  <nav class="md-header__inner md-grid" aria-label="Header">
131
132    <!-- Link to home -->
133    <a href=".." title="z-aki" class="md-header__button md-logo" aria-label="z-aki" data-md-component="logo">
134      
135  
136  <svg xmlns="http://www.w3.org/2000/svg" viewbox="0 0 24 24"><path d="M12 8a3 3 0 0 0 3-3 3 3 0 0 0-3-3 3 3 0 0 0-3 3 3 3 0 0 0 3 3m0 3.54C9.64 9.35 6.5 8 3 8v11c3.5 0 6.64 1.35 9 3.54 2.36-2.19 5.5-3.54 9-3.54V8c-3.5 0-6.64 1.35-9 3.54"></path></svg>
137
138      <!-- z-aki-modification -->
139        <div class="md-header__topic">
140          <span class="md-ellipsis">
141            z-aki
142          </span>
143        </div>
144    </a>
145
146    <!-- Button to open drawer -->
147    <label class="md-header__button md-icon" for="__drawer">
148      
149      <svg xmlns="http://www.w3.org/2000/svg" viewbox="0 0 24 24"><path d="M3 6h18v2H3zm0 5h18v2H3zm0 5h18v2H3z"></path></svg>
150    </label>
151
152    <!-- Header title -->
153    <div class="md-header__title" data-md-component="header-title">
154      <div class="md-header__ellipsis">
155        <!-- z-aki-modification -->
156        <div class="md-header__topic">
157          <span class="md-ellipsis">
158          </span>
159        </div>
160        <div class="md-header__topic" data-md-component="header-topic">
161          <span class="md-ellipsis">
162            
163              Vulnerability Analysis and disclosures
164            
165          </span>
166        </div>
167      </div>
168    </div>
169
170    <!-- Color palette toggle -->
171    
172      
173    
174
175    <!-- User preference: color palette -->
176    
177
178    <!-- Site language selector -->
179    
180
181    <!-- Button to open search modal -->
182    
183      
184
185      <!-- Check if search is actually enabled - see https://t.ly/DT_0V -->
186      
187        <label class="md-header__button md-icon" for="__search">
188          
189          <svg xmlns="http://www.w3.org/2000/svg" viewbox="0 0 24 24">
189<path d="M9.5 3A6.5 6.5 0 0 1 16 9.5c0 1.61-.59 3.09-1.56 4.23l.27.27h.79l5 5-1.5 1.5-5-5v-.79l-.27-.27A6.52 6.52 0 0 1 9.5 16 6.5 6.5 0 0 1 3 9.5 6.5 6.5 0 0 1 9.5 3m0 2C7 5 5 7 5 9.5S7 14 9.5 14 14 12 14 9.5 12 5 9.5 5"></path></svg>
190        </label>
191
192        <!-- Search interface -->
193        <div class="md-search" data-md-component="search" role="dialog">
194  <label class="md-search__overlay" for="__search"></label>
195  <div class="md-search__inner" role="search">
196    <form class="md-search__form" name="search">
197      <input type="text" class="md-search__input" name="query" aria-label="Search" placeholder="Search" autocapitalize="off" autocorrect="off" autocomplete="off" spellcheck="false" data-md-component="search-query" required>
198      <label class="md-search__icon md-icon" for="__search">
199        
200        <svg xmlns="http://www.w3.org/2000/svg" viewbox="0 0 24 24"><path d="M9.5 3A6.5 6.5 0 0 1 16 9.5c0 1.61-.59 3.09-1.56 4.23l.27.27h.79l5 5-1.5 1.5-5-5v-.79l-.27-.27A6.52 6.52 0 0 1 9.5 16 6.5 6.5 0 0 1 3 9.5 6.5 6.5 0 0 1 9.5 3m0 2C7 5 5 7 5 9.5S7 14 9.5 14 14 12 14 9.5 12 5 9.5 5"></path></svg>
201        
202        <svg xmlns="http://www.w3.org/2000/svg" viewbox="0 0 24 24"><path d="M20 11v2H8l5.5 5.5-1.42 1.42L4.16 12l7.92-7.92L13.5 5.5 8 11z"></path></svg>
203      </label>
204      <nav class="md-search__options" aria-label="Search">
205        
206        <button type="reset" class="md-search__icon md-icon" title="Clear" aria-label="Clear" tabindex="-1">
207          
208          <svg xmlns="http://www.w3.org/2000/svg" viewbox="0 0 24 24"><path d="M19 6.41 17.59 5 12 10.59 6.41 5 5 6.41 10.59 12 5 17.59 6.41 19 12 13.41 17.59 19 19 17.59 13.41 12z"></path></svg>
209        </button>
210      </nav>
211      
212    </form>
213    <div class="md-search__output">
214      <div class="md-search__scrollwrap" tabindex="0" data-md-scrollfix>
215        <div class="md-search-result" data-md-component="search-result">
216          <div class="md-search-result__meta">
217            Initializing search
218          </div>
219          <ol class="md-search-result__list" role="presentation"></ol>
220        </div>
221      </div>
222    </div>
223  </div>
224</div>
225      
226    
227
228    <!-- Repository information -->
229    
230      <div class="md-header__source">
231        <a href="https://github.com/z-aki/z-aki.github.io" title="Go to repository" class="md-source plugin_open_external_links_in_new_tab" data-md-component="source" target="_blank" rel="noopener noreferrer">
232  <div class="md-source__icon md-icon">
233    
234    <svg xmlns="http://www.w3.org/2000/svg" viewbox="0 0 448 512"><!--! Font Awesome Free 6.7.2 by @fontawesome - https://fontawesome.com License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License) Copyright 2024 Fonticons, Inc.--><path d="M439.55 236.05 244 40.45a28.87 28.87 0 0 0-40.81 0l-40.66 40.63 51.52 51.52c27.06-9.14 52.68 16.77 43.39 43.68l49.66 49.66c34.23-11.8 61.18 31 35.47 56.69-26.49 26.49-70.21-2.87-56-37.34L240.22 199v121.85c25.3 12.54 22.26 41.85 9.08 55a34.34 34.34 0 0 1-48.55 0c-17.57-17.6-11.07-46.91 11.25-56v-123c-20.8-8.51-24.6-30.74-18.64-45L142.57 101 8.45 235.14a28.86 28.86 0 0 0 0 40.81l195.61 195.6a28.86 28.86 0 0 0 40.8 0l194.69-194.69a28.86 28.86 0 0 0 0-40.81"></path></svg>
235  </div>
236  <div class="md-source__repository">
237    GitHub
238  </div>
239</a>
240      </div>
241    
242  </nav>
243
244  <!-- Navigation tabs (sticky) -->
245  
246    
247      
248<nav class="md-tabs" aria-label="Tabs" data-md-component="tabs">
249  <div class="md-grid">
250    <ul class="md-tabs__list">
251      
252        
253  
254  
255  
256  
257    <li class="md-tabs__item">
258      <a href=".." class="md-tabs__link">
259        
260  
261  
262    
263  
264  Home
265
266      </a>
267    </li>
268  
269
270      
271        
272  
273  
274  
275    
276  
277  
278    
279    
280      <li class="md-tabs__item md-tabs__item--active">
281        <a href="./" class="md-tabs__link">
282          
283  
284  
285  Vulnerabilities
286
287        </a>
288      </li>
289    
290  
291
292      
293        
294  
295  
296  
297  
298    
299    
300      <li class="md-tabs__item">
301        <a href="../digipin/tool/" class="md-tabs__link">
302          
303  
304  
305  Digipin converter
306
307        </a>
308      </li>
309    
310  
311
312      
313        
314  
315  
316  
317  
318    
319    
320      <li class="md-tabs__item">
321        <a href="../tampermonkey/" class="md-tabs__link">
322          
323  
324  
325  Tampermonkey
326
327        </a>
328      </li>
329    
330  
331
332      
333        
334  
335  
336  
337  
338    
339    
340      <li class="md-tabs__item">
341        <a href="../tools/" class="md-tabs__link">
342          
343  
344  
345  Automator and Thunderbird Addons
346
347        </a>
348      </li>
349    
350  
351
352      
353        
354  
355  
356  
357  
358    
359    
360      <li class="md-tabs__item">
361        <a href="../rti/" class="md-tabs__link">
362          
363  
364  
365  RTIs
366
367        </a>
368      </li>
369    
370  
371
372      
373        
374  
375  
376  
377  
378    <li class="md-tabs__item">
379      <a href="../dev_index/" class="md-tabs__link">
380        
381  
382  
383    
384  
385  dev docs
386
387      </a>
388    </li>
389  
390
391      
392        
393  
394  
395  
396  
397    <li class="md-tabs__item">
398      <a href="../about/" class="md-tabs__link">
399        
400  
401  
402    
403  
404  About Me/Contact
405
406      </a>
407    </li>
408  
409
410      
411    </ul>
412  </div>
413</nav>
414    
415  
416</header>
417    
418    <div class="md-container" data-md-component="container">
419      
420      
421        
422      
423      <main class="md-main" data-md-component="main">
424        <div class="md-main__inner md-grid">
425          
426            
427              
428              <div class="md-sidebar md-sidebar--primary" data-md-component="sidebar" data-md-type="navigation">
429                <div class="md-sidebar__scrollwrap">
430                  <div class="md-sidebar__inner">
431                    <!--
432  Copyright (c) 2016-2025 Martin Donath <[email protected]>
433
434  Permission is hereby granted, free of charge, to any person obtaining a copy
435  of this software and associated documentation files (the "Software"), to
436  deal in the Software without restriction, including without limitation the
437  rights to use, copy, modify, merge, publish, distribute, sublicense, and/or
438  sell copies of the Software, and to permit persons to whom the Software is
439  furnished to do so, subject to the following conditions:
440
441  The above copyright notice and this permission notice shall be included in
442  all copies or substantial portions of the Software.
443
444  THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
445  IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
446  FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. IN NO EVENT SHALL THE
447  AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
448  LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
449  FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS
450  IN THE SOFTWARE.
451-->
452
453
454
455<!-- Determine classes -->
456
457
458  
459
460
461  
462
463
464<!-- Navigation -->
465<nav class="md-nav md-nav--primary md-nav--lifted md-nav--integrated" aria-label="Navigation" data-md-level="0">
466
467  <!-- Site title -->
468  <label class="md-nav__title" for="__drawer">
469    <a href=".." title="z-aki" class="md-nav__button md-logo" aria-label="z-aki" data-md-component="logo">
470      
471  
472  <svg xmlns="http://www.w3.org/2000/svg" viewbox="0 0 24 24">
472<path d="M12 8a3 3 0 0 0 3-3 3 3 0 0 0-3-3 3 3 0 0 0-3 3 3 3 0 0 0 3 3m0 3.54C9.64 9.35 6.5 8 3 8v11c3.5 0 6.64 1.35 9 3.54 2.36-2.19 5.5-3.54 9-3.54V8c-3.5 0-6.64 1.35-9 3.54"></path></svg>
473
474      <!-- z-aki-modification -->
475      z-aki
476    </a>
477  </label>
478
479  <!-- Repository information -->
480  
481    <div class="md-nav__source">
482      <a href="https://github.com/z-aki/z-aki.github.io" title="Go to repository" class="md-source plugin_open_external_links_in_new_tab" data-md-component="source" target="_blank" rel="noopener noreferrer">
483  <div class="md-source__icon md-icon">
484    
485    <svg xmlns="http://www.w3.org/2000/svg" viewbox="0 0 448 512"><!--! Font Awesome Free 6.7.2 by @fontawesome - https://fontawesome.com License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License) Copyright 2024 Fonticons, Inc.--><path d="M439.55 236.05 244 40.45a28.87 28.87 0 0 0-40.81 0l-40.66 40.63 51.52 51.52c27.06-9.14 52.68 16.77 43.39 43.68l49.66 49.66c34.23-11.8 61.18 31 35.47 56.69-26.49 26.49-70.21-2.87-56-37.34L240.22 199v121.85c25.3 12.54 22.26 41.85 9.08 55a34.34 34.34 0 0 1-48.55 0c-17.57-17.6-11.07-46.91 11.25-56v-123c-20.8-8.51-24.6-30.74-18.64-45L142.57 101 8.45 235.14a28.86 28.86 0 0 0 0 40.81l195.61 195.6a28.86 28.86 0 0 0 40.8 0l194.69-194.69a28.86 28.86 0 0 0 0-40.81"></path></svg>
486  </div>
487  <div class="md-source__repository">
488    GitHub
489  </div>
490</a>
491    </div>
492  
493
494  <!-- Navigation list -->
495  <ul class="md-nav__list" data-md-scrollfix>
496    
497      
498      
499  
500  
501  
502  
503    <li class="md-nav__item">
504      <a href=".." class="md-nav__link">
505        
506  
507  
508  <span class="md-ellipsis">
509    Home
510    
511  </span>
512  
513
514      </a>
515    </li>
516  
517
518    
519      
520      
521  
522  
523    
524  
525  
526  
527    
528    
529    
530    
531      
532        
533        
534      
535      
536        
537      
538    
539    
540    <li class="md-nav__item md-nav__item--active md-nav__item--section md-nav__item--nested">
541      
542        
543        
544        <input class="md-nav__toggle md-toggle " type="checkbox" id="__nav_2" checked>
545        
546          
547          <label class="md-nav__link" for="__nav_2" id="__nav_2_label" tabindex="">
548            
549  
550  
551  <span class="md-ellipsis">
552    Vulnerabilities
553    
554  </span>
555  
556
557            <span class="md-nav__icon md-icon"></span>
558          </label>
559        
560        <nav class="md-nav" data-md-level="1" aria-labelledby="__nav_2_label" aria-expanded="true">
561          <label class="md-nav__title" for="__nav_2">
562            <span class="md-nav__icon md-icon"></span>
563            Vulnerabilities
564          </label>
565          <ul class="md-nav__list" data-md-scrollfix>
566            
567              
568                
569  
570  
571    
572  
573  
574    
575      
576    
577  
578  
579    <li class="md-nav__item md-nav__item--active">
580      
581      <input class="md-nav__toggle md-toggle" type="checkbox" id="__toc">
582      
583      
584        
585      
586      
587        <label class="md-nav__link md-nav__link--active" for="__toc">
588          
589  
590  
591  <span class="md-ellipsis">
592    Vulnerability Analysis and disclosures
593    
594  </span>
595  
596
597          <span class="md-nav__icon md-icon"></span>
598        </label>
599      
600      <a href="./" class="md-nav__link md-nav__link--active">
601        
602  
603  
604  <span class="md-ellipsis">
605    Vulnerability Analysis and disclosures
606    
607  </span>
608  
609
610      </a>
611      
612        
613
614<nav class="md-nav md-nav--secondary" aria-label="Table of contents">
615  
616  
617  
618    
619  
620  
621    <label class="md-nav__title" for="__toc">
622      <span class="md-nav__icon md-icon"></span>
623      Table of contents
624    </label>
625    <ul class="md-nav__list" data-md-component="toc" data-md-scrollfix>
626      
627        <li class="md-nav__item">
628  <a href="#bimabharosa-irdai" class="md-nav__link">
629    <span class="md-ellipsis">
630      Bimabharosa IRDAI
631    </span>
632  </a>
633  
634</li>
635      
636        <li class="md-nav__item">
637  <a href="#ombudsman-portal-reserve-bank-of-india-vulnerability-2024" class="md-nav__link">
638    <span class="md-ellipsis">
639      Ombudsman portal Reserve Bank of India Vulnerability 2024
640    </span>
641  </a>
642  
643</li>
644      
645        <li class="md-nav__item">
646  <a href="#e-jagriti-portal-vulnerabilities-2025" class="md-nav__link">
647    <span class="md-ellipsis">
648      E-Jagriti portal vulnerabilities 2025
649    </span>
650  </a>
651  
652</li>
653      
654        <li class="md-nav__item">
655  <a href="#manipal-hospitals-pvt-ltd-vulnerability-2024" class="md-nav__link">
656    <span class="md-ellipsis">
657      Manipal Hospitals pvt ltd vulnerability 2024
658    </span>
659  </a>
660  
661</li>
662      
663        <li class="md-nav__item">
664  <a href="#council-of-insurance-ombudsman-cioins-api-vulnerabilities-2024" class="md-nav__link">
665    <span class="md-ellipsis">
666      Council of Insurance Ombudsman CIOINS API Vulnerabilities 2024
667    </span>
668  </a>
669  
670</li>
671      
672        <li class="md-nav__item">
673  <a href="#indigo-vulnerability-2022-2024-and-air-india-vulnerability-2025" class="md-nav__link">
674    <span class="md-ellipsis">
675      Indigo Vulnerability 2022-2024 and Air india vulnerability 2025
676    </span>
677  </a>
678  
679</li>
680      
681        <li class="md-nav__item">
682  <a href="#the-new-india-assurance-co-ltd-alleged-vulnerability-2024" class="md-nav__link">
683    <span class="md-ellipsis">
684      The New India Assurance Co Ltd Alleged Vulnerability 2024
685    </span>
686  </a>
687  
688</li>
689      
690        <li class="md-nav__item">
691  <a href="#lic-cyber-vulnerabilities-and-data-breaches-2024-2025" class="md-nav__link">
692    <span class="md-ellipsis">
693      LIC cyber vulnerabilities and data breaches 2024-2025
694    </span>
695  </a>
696  
697</li>
698      
699    </ul>
700  
701</nav>
702      
703    </li>
704  
705
706              
707            
708          </ul>
709        </nav>
710      
711    </li>
712  
713
714    
715      
716      
717  
718  
719  
720  
721    
722    
723    
724    
725      
726      
727        
728      
729    
730    
731    <li class="md-nav__item md-nav__item--nested">
732      
733        
734        
735          
736        
737        <input class="md-nav__toggle md-toggle md-toggle--indeterminate" type="checkbox" id="__nav_3">
738        
739          
740          <label class="md-nav__link" for="__nav_3" id="__nav_3_label" tabindex="0">
741            
742  
743  
744  <span class="md-ellipsis">
745    Digipin converter
746    
747  </span>
748  
749
750            <span class="md-nav__icon md-icon"></span>
751          </label>
752        
753        <nav class="md-nav" data-md-level="1" aria-labelledby="__nav_3_label" aria-expanded="false">
754          <label class="md-nav__title" for="__nav_3">
755            <span class="md-nav__icon md-icon"></span>
756            Digipin converter
757          </label>
758          <ul class="md-nav__list" data-md-scrollfix>
759            
760              
761                
762  
763  
764  
765  
766    <li class="md-nav__item">
767      <a href="../digipin/tool/" class="md-nav__link">
768        
769  
770  
771  <span class="md-ellipsis">
772    Digipin converter
773    
774  </span>
775  
776
777      </a>
778    </li>
779  
780
781              
782            
783              
784                
785  
786  
787  
788  
789    <li class="md-nav__item">
790      <a href="../digipin/convert%20digipin%20to%20latitude%20longitude/" class="md-nav__link">
791        
792  
793  
794  <span class="md-ellipsis">
795    iOS, macOS, Google Maps in browser (Tampermonkey script)
796    
797  </span>
798  
799
800      </a>
801    </li>
802  
803
804              
805            
806          </ul>
807        </nav>
808      
809    </li>
810  
811
812    
813      
814      
815  
816  
817  
818  
819    
820    
821    
822    
823      
824      
825        
826      
827    
828    
829    <li class="md-nav__item md-nav__item--nested">
830      
831        
832        
833          
834        
835        <input class="md-nav__toggle md-toggle md-toggle--indeterminate" type="checkbox" id="__nav_4">
836        
837          
838          <label class="md-nav__link" for="__nav_4" id="__nav_4_label" tabindex="0">
839            
840  
841  
842  <span class="md-ellipsis">
843    Tampermonkey
844    
845  </span>
846  
847
848            <span class="md-nav__icon md-icon"></span>
849          </label>
850        
851        <nav class="md-nav" data-md-level="1" aria-labelledby="__nav_4_label" aria-expanded="false">
852          <label class="md-nav__title" for="__nav_4">
853            <span class="md-nav__icon md-icon"></span>
854            Tampermonkey
855          </label>
856          <ul class="md-nav__list" data-md-scrollfix>
857            
858              
859                
860  
861  
862  
863    
864  
865  
866    <li class="md-nav__item">
867      <a href="../tampermonkey/" class="md-nav__link">
868        
869  
870  
871  <span class="md-ellipsis">
872    Helpful Tampermonkey Scripts
873    
874  </span>
875  
876
877      </a>
878    </li>
879  
880
881              
882            
883          </ul>
884        </nav>
885      
886    </li>
887  
888
889    
890      
891      
892  
893  
894  
895  
896    
897    
898    
899    
900      
901      
902        
903      
904    
905    
906    <li class="md-nav__item md-nav__item--nested">
907      
908        
909        
910          
911        
912        <input class="md-nav__toggle md-toggle md-toggle--indeterminate" type="checkbox" id="__nav_5">
913        
914          
915          <label class="md-nav__link" for="__nav_5" id="__nav_5_label" tabindex="0">
916            
917  
918  
919  <span class="md-ellipsis">
920    Automator and Thunderbird Addons
921    
922  </span>
923  
924
925            <span class="md-nav__icon md-icon"></span>
926          </label>
927        
928        <nav class="md-nav" data-md-level="1" aria-labelledby="__nav_5_label" aria-expanded="false">
929          <label class="md-nav__title" for="__nav_5">
930            <span class="md-nav__icon md-icon"></span>
931            Automator and Thunderbird Addons
932          </label>
933          <ul class="md-nav__list" data-md-scrollfix>
934            
935              
936                
937  
938  
939  
940    
941  
942  
943    <li class="md-nav__item">
944      <a href="../tools/" class="md-nav__link">
945        
946  
947  
948  <span class="md-ellipsis">
949    Automator and Thunderbird Addons
950    
951  </span>
952  
953
954      </a>
955    </li>
956  
957
958              
959            
960          </ul>
961        </nav>
962      
963    </li>
964  
965
966    
967      
968      
969  
970  
971  
972  
973    
974    
975    
976    
977      
978      
979        
980      
981    
982    
983    <li class="md-nav__item md-nav__item--nested">
984      
985        
986        
987          
988        
989        <input class="md-nav__toggle md-toggle md-toggle--indeterminate" type="checkbox" id="__nav_6">
990        
991          
992          <label class="md-nav__link" for="__nav_6" id="__nav_6_label" tabindex="0">
993            
994  
995  
996  <span class="md-ellipsis">
997    RTIs
998    
999  </span>
1000  
1001
1002            <span class="md-nav__icon md-icon"></span>
1003          </label>
1004        
1005        <nav class="md-nav" data-md-level="1" aria-labelledby="__nav_6_label" aria-expanded="false">
1006          <label class="md-nav__title" for="__nav_6">
1007            <span class="md-nav__icon md-icon"></span>
1008            RTIs
1009          </label>
1010          <ul class="md-nav__list" data-md-scrollfix>
1011            
1012              
1013                
1014  
1015  
1016  
1017    
1018  
1019  
1020    <li class="md-nav__item">
1021      <a href="../rti/" class="md-nav__link">
1022        
1023  
1024  
1025  <span class="md-ellipsis">
1026    RTI Organizations List
1027    
1028  </span>
1029  
1030
1031      </a>
1032    </li>
1033  
1034
1035              
1036            
1037          </ul>
1038        </nav>
1039      
1040    </li>
1041  
1042
1043    
1044      
1045      
1046  
1047  
1048  
1049  
1050    <li class="md-nav__item">
1051      <a href="../dev_index/" class="md-nav__link">
1052        
1053  
1054  
1055  <span class="md-ellipsis">
1056    dev docs
1057    
1058  </span>
1059  
1060
1061      </a>
1062    </li>
1063  
1064
1065    
1066      
1067      
1068  
1069  
1070  
1071  
1072    <li class="md-nav__item">
1073      <a href="../about/" class="md-nav__link">
1074        
1075  
1076  
1077  <span class="md-ellipsis">
1078    About Me/Contact
1079    
1080  </span>
1081  
1082
1083      </a>
1084    </li>
1085  
1086
1087    
1088  </ul>
1089</nav>
1090                  </div>
1091                </div>
1092              </div>
1093            
1094            
1095          
1096          
1097  <div class="md-content" data-md-component="content">
1098    <div class="md-content__inner">
1099      <header class="md-typeset">
1100        <div><p><a href="/">Home</a> ▶ Vulnerabilities
1101<br></p>
1102<h1 id="vulnerability-analysis-and-disclosures">Vulnerability Analysis and disclosures<a class="headerlink" href="#vulnerability-analysis-and-disclosures" title="Permanent link">¶</a></h1>
1103<p>CERT-in has been very responsive and helpful in reacting to incident reports and getting vulnerabilities fixed.</p>
1104<ul>
1105<li>Report incidents to <a href="https://www.cert-in.org.in/RVDCP.jsp" target="_blank" rel="noopener noreferrer" class="plugin_open_external_links_in_new_tab">CERT-in</a> using the form given on that page. The PDF is just a guide. An email is sufficient as long as it contains all the fields of that PDF form.</li>
1106<li>For finance related vulnerabilities, CC this email: <a href="https://www.cert-in.org.in/PDF/CSIRT-Fin.pdf" target="_blank" rel="noopener noreferrer" class="plugin_open_external_links_in_new_tab">CSIRT-fin</a></li>
1107</ul>
1108<p>All of the vulnerabilities presented here are for educational purpose (especially for the CISO and developers of these organizations). All vulnerabilities have been fixed by the service providers before these disclosures.</p>
1109<p>The curl commands are not in full; only relevant headers are kept for brevity</p>
1110<hr>
1111<div class="grid cards">
1112<ul>
1113<li>
1114<p><span class="twemoji lg middle"><svg xmlns="http://www.w3.org/2000/svg" viewbox="0 0 24 24"><path d="M11.5 1 2 6v2h19V6m-5 4v7h3v-7M2 22h19v-3H2m8-9v7h3v-7m-9 0v7h3v-7z"></path></svg></span> <a href="2025/08/11/lic-cyber-vulnerabilities-and-data-breaches-2024-2025/">Life Insurance Corporation of India</a></p>
1115</li>
1116<li>
1117<p><span class="twemoji lg middle"><svg xmlns="http://www.w3.org/2000/svg" viewbox="0 0 24 24"><path d="M18 14h-4v4h-4v-4H6v-4h4V6h4v4h4"></path></svg></span> <a href="2025/08/14/manipal-hospitals-pvt-ltd-vulnerability-2024/">Manipal Hospitals</a></p>
1118</li>
1119<li>
1120<p><span class="twemoji lg middle"><svg xmlns="http://www.w3.org/2000/svg" viewbox="0 0 24 24"><path d="m2.3 20.28 9.6-9.6-1.4-1.42-.72.71a.996.996 0 0 1-1.41 0l-.71-.71a.996.996 0 0 1 0-1.41l5.66-5.66a.996.996 0 0 1 1.41 0l.71.71c.39.39.39 1.02 0 1.41l-.71.69 1.42 1.43a.996.996 0 0 1 1.41 0c.39.39.39 1.03 0 1.42l1.41 1.41.71-.71c.39-.39 1.03-.39 1.42 0l.7.71c.39.39.39 1.03 0 1.42l-5.65 5.65c-.39.39-1.03.39-1.42 0l-.7-.7a.99.99 0 0 1 0-1.42l.7-.71-1.41-1.41-9.61 9.61a.996.996 0 0 1-1.41 0c-.39-.39-.39-1.03 0-1.42M20 19a2 2 0 0 1 2 2v1H12v-1a2 2 0 0 1 2-2z"></path></svg></span> <a href="2025/08/13/council-of-insurance-ombudsman-cioins-api-vulnerabilities-2024/">Council of Insurance Ombudsman</a></p>
1121</li>
1122<li>
1123<p><span class="twemoji lg middle"><svg xmlns="http://www.w3.org/2000/svg" viewbox="0 0 24 24"><path d="m2.3 20.28 9.6-9.6-1.4-1.42-.72.71a.996.996 0 0 1-1.41 0l-.71-.71a.996.996 0 0 1 0-1.41l5.66-5.66a.996.996 0 0 1 1.41 0l.71.71c.39.39.39 1.02 0 1.41l-.71.69 1.42 1.43a.996.996 0 0 1 1.41 0c.39.39.39 1.03 0 1.42l1.41 1.41.71-.71c.39-.39 1.03-.39 1.42 0l.7.71c.39.39.39 1.03 0 1.42l-5.65 5.65c-.39.39-1.03.39-1.42 0l-.7-.7a.99.99 0 0 1 0-1.42l.7-.71-1.41-1.41-9.61 9.61a.996.996 0 0 1-1.41 0c-.39-.39-.39-1.03 0-1.42M20 19a2 2 0 0 1 2 2v1H12v-1a2 2 0 0 1 2-2z"></path></svg></span> <a href="2025/08/14/bimabharosa-irdai/">Bimabharosa Portal, Insurance Regulatory and Development Authority of India</a></p>
1124</li>
1125<li>
1126<p><span class="twemoji lg middle"><svg xmlns="http://www.w3.org/2000/svg" viewbox="0 0 24 24">
1126<path d="m2.3 20.28 9.6-9.6-1.4-1.42-.72.71a.996.996 0 0 1-1.41 0l-.71-.71a.996.996 0 0 1 0-1.41l5.66-5.66a.996.996 0 0 1 1.41 0l.71.71c.39.39.39 1.02 0 1.41l-.71.69 1.42 1.43a.996.996 0 0 1 1.41 0c.39.39.39 1.03 0 1.42l1.41 1.41.71-.71c.39-.39 1.03-.39 1.42 0l.7.71c.39.39.39 1.03 0 1.42l-5.65 5.65c-.39.39-1.03.39-1.42 0l-.7-.7a.99.99 0 0 1 0-1.42l.7-.71-1.41-1.41-9.61 9.61a.996.996 0 0 1-1.41 0c-.39-.39-.39-1.03 0-1.42M20 19a2 2 0 0 1 2 2v1H12v-1a2 2 0 0 1 2-2z"></path></svg></span> <a href="2025/08/14/ombudsman-portal-reserve-bank-of-india-vulnerability-2024/">Ombudsman Complaint portal, Reserve Bank of India</a></p>
1127</li>
1128<li>
1129<p><span class="twemoji lg middle"><svg xmlns="http://www.w3.org/2000/svg" viewbox="0 0 24 24"><path d="m2.3 20.28 9.6-9.6-1.4-1.42-.72.71a.996.996 0 0 1-1.41 0l-.71-.71a.996.996 0 0 1 0-1.41l5.66-5.66a.996.996 0 0 1 1.41 0l.71.71c.39.39.39 1.02 0 1.41l-.71.69 1.42 1.43a.996.996 0 0 1 1.41 0c.39.39.39 1.03 0 1.42l1.41 1.41.71-.71c.39-.39 1.03-.39 1.42 0l.7.71c.39.39.39 1.03 0 1.42l-5.65 5.65c-.39.39-1.03.39-1.42 0l-.7-.7a.99.99 0 0 1 0-1.42l.7-.71-1.41-1.41-9.61 9.61a.996.996 0 0 1-1.41 0c-.39-.39-.39-1.03 0-1.42M20 19a2 2 0 0 1 2 2v1H12v-1a2 2 0 0 1 2-2z"></path></svg></span> <a href="2025/08/14/e-jagriti-portal-vulnerabilities-2025/">e-Jagriti, Consumer Affairs</a></p>
1130</li>
1131<li>
1132<p><span class="twemoji lg middle"><svg xmlns="http://www.w3.org/2000/svg" viewbox="0 0 24 24"><path d="M20.56 3.91c.59.59.59 1.54 0 2.12l-3.89 3.89 2.12 9.19-1.41 1.42-3.88-7.43L9.6 17l.36 2.47-1.07 1.06-1.76-3.18-3.19-1.77L5 14.5l2.5.37L11.37 11 3.94 7.09l1.42-1.41 9.19 2.12 3.89-3.89c.56-.58 1.56-.58 2.12 0"></path></svg></span> <a href="2025/08/13/indigo-vulnerability-2022-2024-and-air-india-vulnerability-2025/">Indigo &amp; Air India Express</a></p>
1133</li>
1134<li>
1135<p><span class="twemoji lg middle"><svg xmlns="http://www.w3.org/2000/svg" viewbox="0 0 24 24"><path d="M11.5 1 2 6v2h19V6m-5 4v7h3v-7M2 22h19v-3H2m8-9v7h3v-7m-9 0v7h3v-7z"></path></svg></span> <a href="2025/08/13/the-new-india-assurance-co-ltd-alleged-vulnerability-2024/">The New India Assurance</a></p>
1136</li>
1137</ul>
1138</div></div>
1139      </header>
1140      
1141        <article class="md-post md-post--excerpt">
1142  <header class="md-post__header">
1143    
1144    <div class="md-post__meta md-meta">
1145      <ul class="md-meta__list">
1146        <li class="md-meta__item">
1147          <time datetime="2025-08-14 00:00:00+00:00">August 14, 2025</time></li>
1148        
1149        
1150          
1151          <li class="md-meta__item">
1152            
1153              3 min read
1154            
1155          </li>
1156        
1157      </ul>
1158      
1159    </div>
1160  </header>
1161  <div class="md-post__content md-typeset">
1162    <h2 id="bimabharosa-irdai"><a class="toclink" href="2025/08/14/bimabharosa-irdai/">Bimabharosa IRDAI</a></h2>
1163<p><a href="/">Home</a> ▶ Vulnerabilities ▶ <a href="/vuln/">Vulnerability Analysis and disclosures</a>
1164<br></p>
1165<p>The Bima Bharosa portal (<a href="https://bimabharosa.irdai.gov.in" target="_blank" rel="noopener noreferrer" class="plugin_open_external_links_in_new_tab">https://bimabharosa.irdai.gov.in</a>) had a vulnerability in its complaint history API that allowed access to sensitive complaint details by simply incrementing the complaint ID. This exposed personal and claim information of policyholders without authentication.</p>
1166<p>Summary of the vulnerabilities:</p>
1167<table>
1168<thead>
1169<tr>
1170<th>Sr</th>
1171<th>API</th>
1172<th>Date reported</th>
1173<th>Date fixed</th>
1174<th>Days taken</th>
1175<th>CERT-in reference number</th>
1176</tr>
1177</thead>
1178<tbody>
1179<tr>
1180<td>1</td>
1181<td><a href="2025/08/14/bimabharosa-irdai/#1-getcomplainthistorydata">GetComplainthistorydata</a></td>
1182<td>18 November 2024</td>
1183<td>before 30 November 2024</td>
1184<td>less than 12 days</td>
1185<td>68209424</td>
1186</tr>
1187<tr>
1188<td>2</td>
1189<td><a href="2025/08/14/bimabharosa-irdai/#2-getcomplainthistorydata-encrypted-payload">encrypted GetComplainthistorydata</a></td>
1190<td>30 November 2024</td>
1191<td>1 January 2025</td>
1192<td>31 days</td>
1193<td>68209424</td>
1194</tr>
1195</tbody>
1196</table>
1197<p>Root cause in <a href="https://cheatsheetseries.owasp.org/index.html" target="_blank" rel="noopener noreferrer" class="plugin_open_external_links_in_new_tab">OWASP</a> terms:</p>
1198<ul>
1199<li>A01 2021 Broken Access Control: CWE-284 Improper Access Control, CWE-285 Improper Authorization</li>
1200<li>A04 2021 Insecure Design: Insecure Direct Object Reference</li>
1201<li>A07 2021 Identification and Authentication Failures: CWE-287 Improper Authentication</li>
1202</ul>
1203
1204    
1205      <nav class="md-post__action">
1206        <a href="2025/08/14/bimabharosa-irdai/">
1207          Continue reading
1208        </a>
1209      </nav>
1210    
1211  </div>
1212</article>
1213      
1214        <article class="md-post md-post--excerpt">
1215  <header class="md-post__header">
1216    
1217    <div class="md-post__meta md-meta">
1218      <ul class="md-meta__list">
1219        <li class="md-meta__item">
1220          <time datetime="2025-08-14 00:00:00+00:00">August 14, 2025</time></li>
1221        
1222        
1223          
1224          <li class="md-meta__item">
1225            
1226              1 min read
1227            
1228          </li>
1229        
1230      </ul>
1231      
1232    </div>
1233  </header>
1234  <div class="md-post__content md-typeset">
1235    <h2 id="ombudsman-portal-reserve-bank-of-india-vulnerability-2024"><a class="toclink" href="2025/08/14/ombudsman-portal-reserve-bank-of-india-vulnerability-2024/">Ombudsman portal Reserve Bank of India Vulnerability 2024</a></h2>
1236<p><a href="/">Home</a> ▶ Vulnerabilities ▶ <a href="/vuln/">Vulnerability Analysis and disclosures</a>
1237<br>
1238The CMS portal (<a href="https://cms.rbi.org.in" target="_blank" rel="noopener noreferrer" class="plugin_open_external_links_in_new_tab">https://cms.rbi.org.in</a>) for the Ombudsman scheme of the RBI had a
1239vulnerability in an API which allowed serial access to the complaint acknowledgement files.</p>
1240<p>Summary of the vulnerabilities:</p>
1241<table>
1242<thead>
1243<tr>
1244<th>Sr</th>
1245<th>API</th>
1246<th>Date reported</th>
1247<th>Date fixed</th>
1248<th>Days taken</th>
1249<th>CERT-in reference number</th>
1250</tr>
1251</thead>
1252<tbody>
1253<tr>
1254<td>1</td>
1255<td><a href="2025/08/14/ombudsman-portal-reserve-bank-of-india-vulnerability-2024/#1-pdffiledownload">PDFFileDownload</a></td>
1256<td>15 December 2024</td>
1257<td>before 19 December 2024</td>
1258<td>less than 4</td>
1259<td>46947024</td>
1260</tr>
1261</tbody>
1262</table>
1263<p>The vulnerability was fixed very promptly.</p>
1264
1265    
1266      <nav class="md-post__action">
1267        <a href="2025/08/14/ombudsman-portal-reserve-bank-of-india-vulnerability-2024/">
1268          Continue reading
1269        </a>
1270      </nav>
1271    
1272  </div>
1273</article>
1274      
1275        <article class="md-post md-post--excerpt">
1276  <header class="md-post__header">
1277    
1278    <div class="md-post__meta md-meta">
1279      <ul class="md-meta__list">
1280        <li class="md-meta__item">
1281          <time datetime="2025-08-14 00:00:00+00:00">August 14, 2025</time></li>
1282        
1283        
1284          
1285          <li class="md-meta__item">
1286            
1287              3 min read
1288            
1289          </li>
1290        
1291      </ul>
1292      
1293    </div>
1294  </header>
1295  <div class="md-post__content md-typeset">
1296    <h2 id="e-jagriti-portal-vulnerabilities-2025"><a class="toclink" href="2025/08/14/e-jagriti-portal-vulnerabilities-2025/">E-Jagriti portal vulnerabilities 2025</a></h2>
1297<p><a href="/">Home</a> ▶ Vulnerabilities ▶ <a href="/vuln/">Vulnerability Analysis and disclosures</a>
1298<br>
1299The EJagriti portal (<a href="https://e-jagriti.gov.in" target="_blank" rel="noopener noreferrer" class="plugin_open_external_links_in_new_tab">https://e-jagriti.gov.in</a>), which is an upgrade of
1300e-daakhil portal, is mandatory for consumer complaint filing and tracking.
1301Any complaint has to be uploaded on this portal before submitting it to the
1302consumer commission registry. It is developed and maintained by NIC(<a href="https://nic.gov.in" target="_blank" rel="noopener noreferrer" class="plugin_open_external_links_in_new_tab">https://nic.gov.in</a>)
1303and content owned by the Department Of Consumer Affairs, Ministry Of Consumer Affairs,
1304Food &amp; Public Distribution, Government Of India.</p>
1305<p>These vulnerabilities allowed access to all case
1306documents (including sensitive information such as ID proofs, affidavits with
1307sign, complaint details, and depending on the case: medical records, bank
1308details, purchase details, land records etc. ) in a trivial manner. Further,
1309the case reference ID, being a serially increasing number, allowed serial
1310access to all other users' case documents.</p>
1311<p>Summary of the vulnerabilities</p>
1312<table>
1313<thead>
1314<tr>
1315<th>Sr</th>
1316<th>API</th>
1317<th>Date reported</th>
1318<th>Date fixed</th>
1319<th>Days taken</th>
1320<th>CERT-in reference number</th>
1321</tr>
1322</thead>
1323<tbody>
1324<tr>
1325<td>1</td>
1326<td><a href="2025/08/14/e-jagriti-portal-vulnerabilities-2025/#1-casefilingdocumentdetails">CaseFilingDocumentDetails</a></td>
1327<td>31 May 2025</td>
1328<td>Partial fix before 17 June. Full fix never confirmed to me. Guessing July</td>
1329<td>18-47</td>
1330<td>38480225</td>
1331</tr>
1332<tr>
1333<td>2</td>
1334<td><a href="2025/08/14/e-jagriti-portal-vulnerabilities-2025/#2-getallcomplainantrespondantdetails">getAllComplainantRespondantDetails</a></td>
1335<td>31 May 2025</td>
1336<td>Partial fix before 17 June. Full fix never confirmed to me. Guessing July</td>
1337<td>18-47</td>
1338<td>38480225</td>
1339</tr>
1340</tbody>
1341</table>
1342<p>Root cause in <a href="https://cheatsheetseries.owasp.org/index.html" target="_blank" rel="noopener noreferrer" class="plugin_open_external_links_in_new_tab">OWASP</a> terms:</p>
1343<ul>
1344<li>A01 2021 Broken Access Control: CWE-35 Path Traversal, CWE-284 Improper
1345  Access Control, CWE-285 Improper Authorization</li>
1346<li>A04 2021 Insecure Design: Insecure Direct Object Reference</li>
1347<li>A07 2021 Identification and Authentication Failures: CWE-287 Improper
1348  Authentication, CWE-613 Insufficient Session Expiration</li>
1349</ul>
1350
1351    
1352      <nav class="md-post__action">
1353        <a href="2025/08/14/e-jagriti-portal-vulnerabilities-2025/">
1354          Continue reading
1355        </a>
1356      </nav>
1357    
1358  </div>
1359</article>
1360      
1361        <article class="md-post md-post--excerpt">
1362  <header class="md-post__header">
1363    
1364    <div class="md-post__meta md-meta">
1365      <ul class="md-meta__list">
1366        <li class="md-meta__item">
1367          <time datetime="2025-08-14 00:00:00+00:00">August 14, 2025</time></li>
1368        
1369        
1370          
1371          <li class="md-meta__item">
1372            
1373              5 min read
1374            
1375          </li>
1376        
1377      </ul>
1378      
1379    </div>
1380  </header>
1381  <div class="md-post__content md-typeset">
1382    <h2 id="manipal-hospitals-pvt-ltd-vulnerability-2024"><a class="toclink" href="2025/08/14/manipal-hospitals-pvt-ltd-vulnerability-2024/">Manipal Hospitals pvt ltd vulnerability 2024</a></h2>
1383<p><a href="/">Home</a> ▶ Vulnerabilities ▶ <a href="/vuln/">Vulnerability Analysis and disclosures</a>
1384<br>
1385The Manipal hospital pvt ltd has a mandatory registration process on its kiosk <a href="https://kiosk.manipalhospitals.com" target="_blank" rel="noopener noreferrer" class="plugin_open_external_links_in_new_tab">https://kiosk.manipalhospitals.com</a>
1386for OPD consultations.
1387The portal collects a lot of information within minutes but the same personal data deletion takes 3-4 months.</p>
1388<p>The portal had numerous vulnerabilities that allowed access to the user's personal data in a serial manner. One API provided the login OTP back to the person logging-in, defeating its whole point. In others, data was flimsyly "protected" just by a static <code>Authorization</code> header exposed in the front-end code.</p>
1389<p>Summary of the vulnerabilities:</p>
1390<table>
1391<thead>
1392<tr>
1393<th>Sr</th>
1394<th>API</th>
1395<th>Date reported</th>
1396<th>Date fixed</th>
1397<th>Days taken</th>
1398<th>CERT-in reference number</th>
1399</tr>
1400</thead>
1401<tbody>
1402<tr>
1403<td>1</td>
1404<td><a href="2025/08/14/manipal-hospitals-pvt-ltd-vulnerability-2024/#1-kioskotpverification">KioskOtpVerification</a></td>
1405<td>27 December 2024</td>
1406<td>Never reverted</td>
1407<td>more than 60 days</td>
1408<td>91742724</td>
1409</tr>
1410<tr>
1411<td>2</td>
1412<td><a href="2025/08/14/manipal-hospitals-pvt-ltd-vulnerability-2024/#2-patientvisithistory">PatientVisitHistory</a></td>
1413<td>27 December 2024</td>
1414<td>Never reverted</td>
1415<td>more than 60 days</td>
1416<td>91742724</td>
1417</tr>
1418<tr>
1419<td>3</td>
1420<td><a href="2025/08/14/manipal-hospitals-pvt-ltd-vulnerability-2024/#3-patdetailsbymobileno">PatDetailsByMobileNo</a></td>
1421<td>27 December 2024</td>
1422<td>Never reverted</td>
1423<td>more than 60 days</td>
1424<td>91742724</td>
1425</tr>
1426</tbody>
1427</table>
1428<p>Root cause in <a href="https://cheatsheetseries.owasp.org/index.html" target="_blank" rel="noopener noreferrer" class="plugin_open_external_links_in_new_tab">OWASP</a> terms:</p>
1429<ul>
1430<li>A01 2021 Broken Access Control: CWE-35 Path Traversal, CWE-284 Improper Access Control, CWE-285 Improper Authorization</li>
1431<li>A02 2021 Cryptographic Failures: CWE-321 Use of Hard-coded Cryptographic Key</li>
1432<li>A04 2021 Insecure Design: Insecure Direct Object Reference</li>
1433<li>A07 2021 Identification and Authentication Failures: CWE-287 Improper Authentication, CWE-613 Insufficient Session Expiration</li>
1434</ul>
1435
1436    
1437      <nav class="md-post__action">
1438        <a href="2025/08/14/manipal-hospitals-pvt-ltd-vulnerability-2024/">
1439          Continue reading
1440        </a>
1441      </nav>
1442    
1443  </div>
1444</article>
1445      
1446        <article class="md-post md-post--excerpt">
1447  <header class="md-post__header">
1448    
1449    <div class="md-post__meta md-meta">
1450      <ul class="md-meta__list">
1451        <li class="md-meta__item">
1452          <time datetime="2025-08-13 00:00:00+00:00">August 13, 2025</time></li>
1453        
1454        
1455          
1456          <li class="md-meta__item">
1457            
1458              4 min read
1459            
1460          </li>
1461        
1462      </ul>
1463      
1464    </div>
1465  </header>
1466  <div class="md-post__content md-typeset">
1467    <h2 id="council-of-insurance-ombudsman-cioins-api-vulnerabilities-2024"><a class="toclink" href="2025/08/13/council-of-insurance-ombudsman-cioins-api-vulnerabilities-2024/">Council of Insurance Ombudsman CIOINS API Vulnerabilities 2024</a></h2>
1468<p><a href="/">Home</a> ▶ Vulnerabilities ▶ <a href="/vuln/">Vulnerability Analysis and disclosures</a>
1469<br>
1470Council of Insurance Ombudsman CIOINS website (<a href="https://cioins.co.in" target="_blank" rel="noopener noreferrer" class="plugin_open_external_links_in_new_tab">https://cioins.co.in</a>) had numerous
1471vulnerabilities covering several OWASP TOP 10 categories in 2024. The vulnerabilities allowed
1472access to a complainant's phone, email, address, dob, policy number, 
1472complaint details
1473and any award passed. After reporting it
1474to CERT-in (CIOINS doesn't have a direct email for this), they simply masked the issue with bogus
1475encryption with key exposed in the front-end source code.</p>
1476<p>After a followup, a proper fix was implemented but with significant delay.</p>
1477<p>Summary of the vulnerabilities:</p>
1478<table>
1479<thead>
1480<tr>
1481<th>Sr</th>
1482<th>API</th>
1483<th>Date reported</th>
1484<th>Date fixed</th>
1485<th>Days taken</th>
1486<th>CERT-in reference number</th>
1487</tr>
1488</thead>
1489<tbody>
1490<tr>
1491<td>1</td>
1492<td><a href="2025/08/13/council-of-insurance-ombudsman-cioins-api-vulnerabilities-2024/#1-fetchcomplaintdetails">FetchComplaintDetails</a></td>
1493<td>16 November 2024</td>
1494<td>9 December 2024</td>
1495<td>21</td>
1496<td>07586124</td>
1497</tr>
1498<tr>
1499<td>2</td>
1500<td><a href="2025/08/13/council-of-insurance-ombudsman-cioins-api-vulnerabilities-2024/#2-retrievedata">RetrieveData</a></td>
1501<td>16 November 2024</td>
1502<td>9 December 2024</td>
1503<td>21</td>
1504<td>07586124</td>
1505</tr>
1506<tr>
1507<td>3</td>
1508<td><a href="2025/08/13/council-of-insurance-ombudsman-cioins-api-vulnerabilities-2024/#3-fetchcomplaints">FetchComplaints</a></td>
1509<td>16 November 2024</td>
1510<td>9 December 2024</td>
1511<td>21</td>
1512<td>07586124</td>
1513</tr>
1514<tr>
1515<td>4</td>
1516<td><a href="2025/08/13/council-of-insurance-ombudsman-cioins-api-vulnerabilities-2024/#4-fetchcomplaintdetails-encrypted-payload">encrypted FetchComplaintDetails</a></td>
1517<td>9 December 2024</td>
1518<td>20 January 2025</td>
1519<td>41 (63 from original)</td>
1520<td>07586124</td>
1521</tr>
1522<tr>
1523<td>5</td>
1524<td><a href="2025/08/13/council-of-insurance-ombudsman-cioins-api-vulnerabilities-2024/#5-retrievedata-encrypted-payload">encrypted RetrieveData</a></td>
1525<td>9 December 2024</td>
1526<td>20 January 2025</td>
1527<td>41 (63 from original)</td>
1528<td>07586124</td>
1529</tr>
1530<tr>
1531<td>6</td>
1532<td><a href="2025/08/13/council-of-insurance-ombudsman-cioins-api-vulnerabilities-2024/#6-fetchcomplaints-encrypted-payload">encrypted FetchComplaints</a></td>
1533<td>9 December 2024</td>
1534<td>20 January 2025</td>
1535<td>41 (63 from original)</td>
1536<td>07586124</td>
1537</tr>
1538</tbody>
1539</table>
1540<p>Root cause in <a href="https://cheatsheetseries.owasp.org/index.html" target="_blank" rel="noopener noreferrer" class="plugin_open_external_links_in_new_tab">OWASP</a> terms:</p>
1541<ul>
1542<li>A01 2021 Broken Access Control: CWE-284 Improper Access Control, CWE-285 Improper Authorization</li>
1543<li>A02 2021 Cryptographic Failures: CWE-321 Use of Hard-coded Cryptographic Key</li>
1544<li>A04 2021 Insecure Design: CWE-73 External Control of File Name or Path, Insecure Direct Object Reference</li>
1545<li>A07 2021 Identification and Authentication Failures: CWE-287 Improper Authentication, CWE-613 Insufficient Session Expiration</li>
1546</ul>
1547
1548    
1549      <nav class="md-post__action">
1550        <a href="2025/08/13/council-of-insurance-ombudsman-cioins-api-vulnerabilities-2024/">
1551          Continue reading
1552        </a>
1553      </nav>
1554    
1555  </div>
1556</article>
1557      
1558        <article class="md-post md-post--excerpt">
1559  <header class="md-post__header">
1560    
1561    <div class="md-post__meta md-meta">
1562      <ul class="md-meta__list">
1563        <li class="md-meta__item">
1564          <time datetime="2025-08-13 00:00:00+00:00">August 13, 2025</time></li>
1565        
1566        
1567          
1568          <li class="md-meta__item">
1569            
1570              23 min read
1571            
1572          </li>
1573        
1574      </ul>
1575      
1576    </div>
1577  </header>
1578  <div class="md-post__content md-typeset">
1579    <h2 id="indigo-vulnerability-2022-2024-and-air-india-vulnerability-2025"><a class="toclink" href="2025/08/13/indigo-vulnerability-2022-2024-and-air-india-vulnerability-2025/">Indigo Vulnerability 2022-2024 and Air india vulnerability 2025</a></h2>
1580<p><a href="/">Home</a> ▶ Vulnerabilities ▶ <a href="/vuln/">Vulnerability Analysis and disclosures</a>
1581<br>
1582Interglobe Indigo's manage booking portal(<a href="https://www.goindigo.in/edit-booking.html" target="_blank" rel="noopener noreferrer" class="plugin_open_external_links_in_new_tab">https://www.goindigo.in/edit-booking.html</a>) and Air India Express (<a href="https://www.airindiaexpress.com/manage" target="_blank" rel="noopener noreferrer" class="plugin_open_external_links_in_new_tab">https://www.airindiaexpress.com/manage</a>)
1583leaked a passenger's number, email, date of birth
1584address and emergency contact information by a PNR and name of a passenger. Even though the content is masked in the UI,
1585the network activity shows the full data.</p>
1586<p>This was originally reported to Indigo in 2022 but was not fixed.</p>
1587<ul>
1588<li>Tweet by <a href="https://twitter.com/_sirius93_" target="_blank" rel="noopener noreferrer" class="plugin_open_external_links_in_new_tab">@_sirius93</a> exposing this vulnerability in 2022 <a href="https://twitter.com/_sirius93_/status/1508423479594733568" target="_blank" rel="noopener noreferrer" class="plugin_open_external_links_in_new_tab">https://twitter.com/_sirius93_/status/1508423479594733568</a></li>
1589<li>Tweet by Indigo denying this and not fixing the issue <a href="https://twitter.com/IndiGo6E/status/1508748146717130758" target="_blank" rel="noopener noreferrer" class="plugin_open_external_links_in_new_tab">https://twitter.com/IndiGo6E/status/1508748146717130758</a></li>
1590<li>
1591<p>News covering this incident</p>
1592<ul>
1593<li><a href="https://economictimes.indiatimes.com/magazines/panache/how-indigo-passenger-hacked-into-carriers-website-to-track-his-missing-luggage-airline-responds/articleshow/90567643.cms?from=mdr" target="_blank" rel="noopener noreferrer" class="plugin_open_external_links_in_new_tab">https://economictimes.indiatimes.com/magazines/panache/how-indigo-passenger-hacked-into-carriers-website-to-track-his-missing-luggage-airline-responds/articleshow/90567643.cms?from=mdr</a></li>
1594<li><a href="https://www.bbc.com/news/world-asia-india-60937480" target="_blank" rel="noopener noreferrer" class="plugin_open_external_links_in_new_tab">https://www.bbc.com/news/world-asia-india-60937480</a></li>
1595<li><a href="https://www.ndtv.com/offbeat/indigos-response-after-techie-hacks-website-to-find-lost-luggage-2853781" target="_blank" rel="noopener noreferrer" class="plugin_open_external_links_in_new_tab">https://www.ndtv.com/offbeat/indigos-response-after-techie-hacks-website-to-find-lost-luggage-2853781</a></li>
1596<li><a href="https://www.livemint.com/news/india/passenger-hacks-indigo-s-website-to-find-lost-bag-airline-responds-11648690601840.html" target="_blank" rel="noopener noreferrer" class="plugin_open_external_links_in_new_tab">https://www.livemint.com/news/india/passenger-hacks-indigo-s-website-to-find-lost-bag-airline-responds-11648690601840.html</a></li>
1597</ul>
1598</li>
1599</ul>
1600<p>After reporting via email to Indigo in July 2024, an incomplete fix was implemented.</p>
1601<p>After reporting to CERT in November 2024, Indigo implemented a complete fix.</p>
1602<p>Air India warns its customers to not display PNR online in its tweets and asks them to share it via DMs.</p>
1603<p>Summary of the vulnerabilities:</p>
1604<table>
1605<thead>
1606<tr>
1607<th>Sr</th>
1608<th>API</th>
1609<th>Date reported</th>
1610<th>Date fixed</th>
1611<th>Days taken</th>
1612<th>CERT-in reference number</th>
1613</tr>
1614</thead>
1615<tbody>
1616<tr>
1617<td>1</td>
1618<td><a href="2025/08/13/indigo-vulnerability-2022-2024-and-air-india-vulnerability-2025/#1-indigo-itinerary">Indigo itinerary</a></td>
1619<td>28 March 2022, 22 July 2024, 23 November 2024</td>
1620<td>December 2024</td>
1621<td>1009, 162, 39</td>
1622<td>64401624</td>
1623</tr>
1624<tr>
1625<td>2</td>
1626<td><a href="2025/08/13/indigo-vulnerability-2022-2024-and-air-india-vulnerability-2025/#2-air-india-retrievedata">Air India RetrieveData</a></td>
1627<td>2 August 2025</td>
1628<td>September 2024</td>
1629<td>30</td>
1630<td>25019125</td>
1631</tr>
1632</tbody>
1633</table>
1634<p>Root cause in <a href="https://cheatsheetseries.owasp.org/index.html" target="_blank" rel="noopener noreferrer" class="plugin_open_external_links_in_new_tab">OWASP</a> terms:</p>
1635<ul>
1636<li>A01 2021 Broken Access Control: CWE-284 Improper Access Control, CWE-285 Improper Authorization</li>
1637<li>A07 2021 Identification and Authentication Failures: CWE-287 Improper Authentication, CWE-613 Insufficient Session Expiration</li>
1638</ul>
1639
1640    
1641      <nav class="md-post__action">
1642        <a href="2025/08/13/indigo-vulnerability-2022-2024-and-air-india-vulnerability-2025/">
1643          Continue reading
1644        </a>
1645      </nav>
1646    
1647  </div>
1648</article>
1649      
1650        <article class="md-post md-post--excerpt">
1651  <header class="md-post__header">
1652    
1653    <div class="md-post__meta md-meta">
1654      <ul class="md-meta__list">
1655        <li class="md-meta__item">
1656          <time datetime="2025-08-13 00:00:00+00:00">August 13, 2025</time></li>
1657        
1658        
1659          
1660          <li class="md-meta__item">
1661            
1662              5 min read
1663            
1664          </li>
1665        
1666      </ul>
1667      
1668    </div>
1669  </header>
1670  <div class="md-post__content md-typeset">
1671    <h2 id="the-new-india-assurance-co-ltd-alleged-vulnerability-2024"><a class="toclink" href="2025/08/13/the-new-india-assurance-co-ltd-alleged-vulnerability-2024/">The New India Assurance Co Ltd Alleged Vulnerability 2024</a></h2>
1672<p><a href="/">Home</a> ▶ Vulnerabilities ▶ <a href="/vuln/">Vulnerability Analysis and disclosures</a>
1673<br>
1674An alleged vulnerability in the <a href="https://www.newindia.co.in/portal/login/customer" target="_blank" rel="noopener noreferrer" class="plugin_open_external_links_in_new_tab">New India Assurance</a> website allowed downloading sensitive personal information of policyholder simply by the policy number.</p>
1675<p>Summary of the alleged vulnerabilities:</p>
1676<table>
1677<thead>
1678<tr>
1679<th>Sr</th>
1680<th>API</th>
1681<th>Date reported</th>
1682<th>Date fixed</th>
1683<th>Days taken</th>
1684<th>CERT-in reference number</th>
1685</tr>
1686</thead>
1687<tbody>
1688<tr>
1689<td>1</td>
1690<td><a href="2025/08/13/the-new-india-assurance-co-ltd-alleged-vulnerability-2024/#1-getpolicydetail
1690s">getPolicyDetails</a></td>
1691<td>31 October 2024</td>
1692<td>before 18 November 2024</td>
1693<td>Less than 18</td>
1694<td>not assigned due to non-reproducibility (due to delay in reporting it to CERT after reporting it to NIA)</td>
1695</tr>
1696</tbody>
1697</table>
1698<p>Alleged root cause in <a href="https://cheatsheetseries.owasp.org/index.html" target="_blank" rel="noopener noreferrer" class="plugin_open_external_links_in_new_tab">OWASP</a> terms:</p>
1699<ul>
1700<li>A01 2021 Broken Access Control: CWE-35 Path Traversal, CWE-284 Improper Access Control, CWE-285 Improper Authorization</li>
1701<li>A04 2021 Insecure Design: Insecure Direct Object Reference</li>
1702<li>A07 2021 Identification and Authentication Failures: CWE-287 Improper Authentication, CWE-613 Insufficient Session Expiration</li>
1703</ul>
1704<p>It is important to note that the <strong>company denied existence</strong> of any vulnerability.</p>
1705
1706    
1707      <nav class="md-post__action">
1708        <a href="2025/08/13/the-new-india-assurance-co-ltd-alleged-vulnerability-2024/">
1709          Continue reading
1710        </a>
1711      </nav>
1712    
1713  </div>
1714</article>
1715      
1716        <article class="md-post md-post--excerpt">
1717  <header class="md-post__header">
1718    
1719    <div class="md-post__meta md-meta">
1720      <ul class="md-meta__list">
1721        <li class="md-meta__item">
1722          <time datetime="2025-08-11 00:00:00+00:00">August 11, 2025</time></li>
1723        
1724        
1725          
1726          <li class="md-meta__item">
1727            
1728              26 min read
1729            
1730          </li>
1731        
1732      </ul>
1733      
1734    </div>
1735  </header>
1736  <div class="md-post__content md-typeset">
1737    <h2 id="lic-cyber-vulnerabilities-and-data-breaches-2024-2025"><a class="toclink" href="2025/08/11/lic-cyber-vulnerabilities-and-data-breaches-2024-2025/">LIC cyber vulnerabilities and data breaches 2024-2025</a></h2>
1738<p><a href="/">Home</a> ▶ Vulnerabilities ▶ <a href="/vuln/">Vulnerability Analysis and disclosures</a>
1739<br>
1740The Life Insurance Corporation of India (LIC) had 6 vulnerabilities in October 2024, December 2024 and April 2025 in their <a href="https://esales.licindia.in" target="_blank" rel="noopener noreferrer" class="plugin_open_external_links_in_new_tab">https://esales.licindia.in</a> website (developed by <a href="https://inubesolutions.com/" target="_blank" rel="noopener noreferrer" class="plugin_open_external_links_in_new_tab">iNube software solutions</a>). Two of them allowed serial access to policy forms of prospect customers containing  Name, DOB, email, phone, PAN card, income tax forms, aadhaar (or other IDs), signature, photo, medical history, address, income, nominees, other policy purchase details, etc.</p>
1741<p>The story was covered only in Medianama.</p>
1742<ul>
1743<li><a href="https://www.medianama.com/2024/12/223-lic-delayed-action-security-warnings-esales-website-public-data/" target="_blank" rel="noopener noreferrer" class="plugin_open_external_links_in_new_tab">Medianama article by Sakshi Sadashiv K, 20 December 2024</a></li>
1744<li>MoneyControl added a small paragraph in a story, 6 months after the incidents based on some "social media posts" (which weren't cited as sources either) <a href="https://www.moneycontrol.com/banking/india-s-insurance-sector-faced-maximum-cyber-onslaught-in-fy25-article-13131547.html" target="_blank" rel="noopener noreferrer" class="plugin_open_external_links_in_new_tab">https://www.moneycontrol.com/banking/india-s-insurance-sector-faced-maximum-cyber-onslaught-in-fy25-article-13131547.html</a></li>
1745</ul>
1746<p>Summary of the vulnerabilities:</p>
1747<table>
1748<thead>
1749<tr>
1750<th>Sr</th>
1751<th>API</th>
1752<th>Date reported</th>
1753<th>Date fixed</th>
1754<th>Days taken</th>
1755<th>CERT-in reference number</th>
1756</tr>
1757</thead>
1758<tbody>
1759<tr>
1760<td>1</td>
1761<td><a href="2025/08/11/lic-cyber-vulnerabilities-and-data-breaches-2024-2025/#1-genericdocumentviewer">GenericDocumentViewer</a></td>
1762<td>16 October 2024</td>
1763<td>23 October 2024</td>
1764<td>7</td>
1765<td>not assigned due to non-reproducibility (due to delay in reporting it to CERT after reporting it to LIC)</td>
1766</tr>
1767<tr>
1768<td>2</td>
1769<td><a href="2025/08/11/lic-cyber-vulnerabilities-and-data-breaches-2024-2025/#2-getpayloadbyquerydynamic">GetPayLoadByQueryDynamic</a></td>
1770<td>16 October 2024, 6 December 2024</td>
1771<td>5 February 2025</td>
1772<td>112, 52</td>
1773<td>CERTIn-80801824</td>
1774</tr>
1775<tr>
1776<td>3</td>
1777<td><a href="2025/08/11/lic-cyber-vulnerabilities-and-data-breaches-2024-2025/#3-getdocumentbyidpost">GetDocumentByIdPost</a></td>
1778<td>9 December 2024</td>
1779<td>28 January 2025</td>
1780<td>50</td>
1781<td>CERTIn-80801824</td>
1782</tr>
1783<tr>
1784<td>4</td>
1785<td><a href="2025/08/11/lic-cyber-vulnerabilities-and-data-breaches-2024-2025/#4-getuserbyuseridpost">GetUserByUserIdPost</a></td>
1786<td>9 December 2024</td>
1787<td>28 January 2025</td>
1788<td>50</td>
1789<td>CERTIn-80801824</td>
1790</tr>
1791<tr>
1792<td>5</td>
1793<td><a href="2025/08/11/lic-cyber-vulnerabilities-and-data-breaches-2024-2025/#5-genericspapi">GenericSPApi</a></td>
1794<td>9 December 2024</td>
1795<td>28 January 2025</td>
1796<td>50</td>
1797<td>CERTIn-80801824</td>
1798</tr>
1799<tr>
1800<td>6</td>
1801<td><a href="2025/08/11/lic-cyber-vulnerabilities-and-data-breaches-2024-2025/#6-getquotedetailbynumberpost">GetQuoteDetailByNumberPost</a></td>
1802<td>4 June 2025</td>
1803<td>25 July 2025</td>
1804<td>51</td>
1805<td>CERTIn-38009725</td>
1806</tr>
1807</tbody>
1808</table>
1809<p>Root cause in <a href="https://cheatsheetseries.owasp.org/index.html" target="_blank" rel="noopener noreferrer" class="plugin_open_external_links_in_new_tab">OWASP</a> terms:</p>
1810<ul>
1811<li>A01 2021 Broken Access Control: CWE-35 Path Traversal, CWE-284 Improper Access Control, CWE-285 Improper Authorization</li>
1812<li>A04 2021 Insecure Design: CWE-73 External Control of File Name or Path, Insecure Direct Object Reference</li>
1813<li>A07 2021 Identification and Authentication Failures: CWE-287 Improper Authentication, CWE-613 Insufficient Session Expiration</li>
1814</ul>
1815
1816    
1817      <nav class="md-post__action">
1818        <a href="2025/08/11/lic-cyber-vulnerabilities-and-data-breaches-2024-2025/">
1819          Continue reading
1820        </a>
1821      </nav>
1822    
1823  </div>
1824</article>
1825      
1826      
1827        
1828          
1829
1830
1831
1832<nav class="md-pagination">
1833  
1834</nav>
1835        
1836      
1837    </div>
1838  </div>
1839
1840          
1841<script>var target=document.getElementById(location.hash.slice(1));target&&target.name&&(target.checked=target.name.startsWith("__tabbed_"))</script>
1841
1842        </div>
1843        
1844          <button type="button" class="md-top md-icon" data-md-component="top" hidden>
1845  
1846  <svg xmlns="http://www.w3.org/2000/svg" viewbox="0 0 24 24"><path d="M13 20h-2V8l-5.5 5.5-1.42-1.42L12 4.16l7.92 7.92-1.42 1.42L13 8z"></path></svg>
1847  Back to top
1848</button>
1849        
1850      </main>
1851      
1852        <footer class="md-footer">
1853  
1854    
1855      
1856      <nav class="md-footer__inner md-grid" aria-label="Footer">
1857        
1858          
1859          <a href=".." class="md-footer__link md-footer__link--prev" aria-label="Previous: Home">
1860            <div class="md-footer__button md-icon">
1861              
1862              <svg xmlns="http://www.w3.org/2000/svg" viewbox="0 0 24 24"><path d="M20 11v2H8l5.5 5.5-1.42 1.42L4.16 12l7.92-7.92L13.5 5.5 8 11z"></path></svg>
1863            </div>
1864            <div class="md-footer__title">
1865              <span class="md-footer__direction">
1866                Previous
1867              </span>
1868              <div class="md-ellipsis">
1869                Home
1870              </div>
1871            </div>
1872          </a>
1873        
1874        
1875          
1876          <a href="../digipin/tool/" class="md-footer__link md-footer__link--next" aria-label="Next: Digipin converter">
1877            <div class="md-footer__title">
1878              <span class="md-footer__direction">
1879                Next
1880              </span>
1881              <div class="md-ellipsis">
1882                Digipin converter
1883              </div>
1884            </div>
1885            <div class="md-footer__button md-icon">
1886              
1887              <svg xmlns="http://www.w3.org/2000/svg" viewbox="0 0 24 24"><path d="M4 11v2h12l-5.5 5.5 1.42 1.42L19.84 12l-7.92-7.92L10.5 5.5 16 11z"></path></svg>
1888            </div>
1889          </a>
1890        
1891      </nav>
1892    
1893  
1894  <div class="md-footer-meta md-typeset">
1895    <div class="md-footer-meta__inner md-grid">
1896      <div class="md-copyright">
1897  
1898    <div class="md-copyright__highlight">
1899      Website content (except code blocks and scripts) © 2025-now by <a href="https://z-aki.github.io" target="_blank" rel="noopener noreferrer" class="plugin_open_external_links_in_new_tab"><u>z-aki (z-aki.github.io)</u></a>
1900is licensed under <a href="https://creativecommons.org/licenses/by-sa/4.0/" target="_blank" rel="noopener noreferrer" class="plugin_open_external_links_in_new_tab"><u>Creative Commons
1901Attribution-ShareAlike 4.0 International</u></a>.
1902<img src="https://mirrors.creativecommons.org/presskit/icons/cc.svg" alt="" style="max-width: 1.5em;max-height:1.5em;margin-left: .2em;">
1903<img src="https://mirrors.creativecommons.org/presskit/icons/by.svg" alt="" style="max-width: 1.5em;max-height:1.5em;margin-left: .2em;">
1904<img src="https://mirrors.creativecommons.org/presskit/icons/sa.svg" alt="" style="max-width: 1.5em;max-height:1.5em;margin-left: .2em;">
1905<br>
1906All code blocks and scripts  © 2025-now by <a href="https://z-aki.github.io" target="_blank" rel="noopener noreferrer" class="plugin_open_external_links_in_new_tab"><u>z-aki (z-aki.github.io)</u></a> are licensed under <a href="https://www.gnu.org/licenses/gpl-3.0.html" target="_blank" rel="noopener noreferrer" class="plugin_open_external_links_in_new_tab"><u>GPL-3.0</u></a>.
1907<img src="https://www.gnu.org/graphics/gplv3-127x51.png" alt="" style="max-width: 3em;max-height:3em;margin-left: .2em;">
1908
1909    </div>
1910  
1911  
1912    Made with
1913    <a href="https://squidfunk.github.io/mkdocs-material/" target="_blank" rel="noopener noreferrer" class="plugin_open_external_links_in_new_tab">
1914      Material for MkDocs
1915    </a>
1916  
1917</div>
1918      
1919        <div class="md-social">
1920  
1921    
1922    
1923    
1924    
1925    <a href="feed_rss_updated.xml" target="_blank" rel="noopener" title="" class="md-social__link">
1926      <svg xmlns="http://www.w3.org/2000/svg" viewbox="0 0 448 512"><!--! Font Awesome Free 6.7.2 by @fontawesome - https://fontawesome.com License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License) Copyright 2024 Fonticons, Inc.--><path d="M64 32C28.7 32 0 60.7 0 96v320c0 35.3 28.7 64 64 64h320c35.3 0 64-28.7 64-64V96c0-35.3-28.7-64-64-64zm32 104c0-13.3 10.7-24 24-24 137 0 248 111 248 248 0 13.3-10.7 24-24 24s-24-10.7-24-24c0-110.5-89.5-200-200-200-13.3 0-24-10.7-24-24m0 96c0-13.3 10.7-24 24-24 83.9 0 152 68.1 152 152 0 13.3-10.7 24-24 24s-24-10.7-24-24c0-57.4-46.6-104-104-104-13.3 0-24-10.7-24-24m0 120a32 32 0 1 1 64 0 32 32 0 1 1-64 0"></path></svg>
1927    </a>
1928  
1929    
1930    
1931    
1932    
1933      
1934      
1935    
1936    <a href="https://github.com/z-aki" target="_blank" rel="noopener noreferrer" title="github.com" class="md-social__link plugin_open_external_links_in_new_tab">
1937      <svg xmlns="http://www.w3.org/2000/svg" viewbox="0 0 496 512"><!--! Font Awesome Free 6.7.2 by @fontawesome - https://fontawesome.com License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License) Copyright 2024 Fonticons, Inc.--><path d="M165.9 397.4c0 2-2.3 3.6-5.2 3.6-3.3.3-5.6-1.3-5.6-3.6 0-2 2.3-3.6 5.2-3.6 3-.3 5.6 1.3 5.6 3.6m
1937-31.1-4.5c-.7 2 1.3 4.3 4.3 4.9 2.6 1 5.6 0 6.2-2s-1.3-4.3-4.3-5.2c-2.6-.7-5.5.3-6.2 2.3m44.2-1.7c-2.9.7-4.9 2.6-4.6 4.9.3 2 2.9 3.3 5.9 2.6 2.9-.7 4.9-2.6 4.6-4.6-.3-1.9-3-3.2-5.9-2.9M244.8 8C106.1 8 0 113.3 0 252c0 110.9 69.8 205.8 169.5 239.2 12.8 2.3 17.3-5.6 17.3-12.1 0-6.2-.3-40.4-.3-61.4 0 0-70 15-84.7-29.8 0 0-11.4-29.1-27.8-36.6 0 0-22.9-15.7 1.6-15.4 0 0 24.9 2 38.6 25.8 21.9 38.6 58.6 27.5 72.9 20.9 2.3-16 8.8-27.1 16-33.7-55.9-6.2-112.3-14.3-112.3-110.5 0-27.5 7.6-41.3 23.6-58.9-2.6-6.5-11.1-33.3 2.6-67.9 20.9-6.5 69 27 69 27 20-5.6 41.5-8.5 62.8-8.5s42.8 2.9 62.8 8.5c0 0 48.1-33.6 69-27 13.7 34.7 5.2 61.4 2.6 67.9 16 17.7 25.8 31.5 25.8 58.9 0 96.5-58.9 104.2-114.8 110.5 9.2 7.9 17 22.9 17 46.4 0 33.7-.3 75.4-.3 83.6 0 6.5 4.6 14.4 17.3 12.1C428.2 457.8 496 362.9 496 252 496 113.3 383.5 8 244.8 8M97.2 352.9c-1.3 1-1 3.3.7 5.2 1.6 1.6 3.9 2.3 5.2 1 1.3-1 1-3.3-.7-5.2-1.6-1.6-3.9-2.3-5.2-1m-10.8-8.1c-.7 1.3.3 2.9 2.3 3.9 1.6 1 3.6.7 4.3-.7.7-1.3-.3-2.9-2.3-3.9-2-.6-3.6-.3-4.3.7m32.4 35.6c-1.6 1.3-1 4.3 1.3 6.2 2.3 2.3 5.2 2.6 6.5 1 1.3-1.3.7-4.3-1.3-6.2-2.2-2.3-5.2-2.6-6.5-1m-11.4-14.7c-1.6 1-1.6 3.6 0 5.9s4.3 3.3 5.6 2.3c1.6-1.3 1.6-3.9 0-6.2-1.4-2.3-4-3.3-5.6-2"></path></svg>
1938    </a>
1939  
1940</div>
1941      
1942    </div>
1943  </div>
1944</footer>
1945      
1946    </div>
1947    <div class="md-dialog" data-md-component="dialog">
1948      <div class="md-dialog__inner md-typeset"></div>
1949    </div>
1950    
1951      <div class="md-progress" data-md-component="progress" role="progressbar"></div>
1952    
1953    
1954    
1955      
1956      
1956<script id="__config" type="application/json">{"base": "..", "features": ["navigation.path", "navigation.tabs", "navigation.footer", "navigation.tracking", "navigation.tabs.sticky", "navigation.sections", "navigation.expand", "navigation.top", "navigation.instant", "navigation.instant.progress", "toc.follow", "toc.integrate", "content.action.edit", "content.action.view", "content.code.copy", "content.code.select"], "search": "../assets/javascripts/workers/search.d50fe291.min.js", "tags": null, "translations": {"clipboard.copied": "Copied to clipboard", "clipboard.copy": "Copy to clipboard", "search.result.more.one": "1 more on this page", "search.result.more.other": "# more on this page", "search.result.none": "No matching documents", "search.result.one": "1 matching document", "search.result.other": "# matching documents", "search.result.placeholder": "Type to start searching", "search.result.term.missing": "Missing", "select.version": "Select version"}, "version": null}</script>
1956
1957    
1958    
1959      
1959<script src="../assets/javascripts/bundle.56ea9cef.min.js"></script>
1959
1960      
1961    
1962  </body>
1963</html>

Line numbers count LF bytes from the start of the resource, as the search results do. Vendor segments are library code the classifier recognised; they are stored but not indexed. Bytes are shown as Latin1 characters, one per byte.