PAYATU

Soummya Mukhopadhyay

Security Consultant
Security Consultant at Payatu covering AppSec, API, thick-client and KIOSK testing, network/Wi-Fi/RF, cloud and red teaming. OSCP, CRTP and CEH certified; Winja CTF winner at Nullcon 2022, and delivered the 'Exploit Writing 101' webinar and a phishing talk at null.
PAYATU

Soummya Mukhopadhyay

Security Consultant
Security Consultant at Payatu covering AppSec, API, thick-client and KIOSK testing, network/Wi-Fi/RF, cloud and red teaming. OSCP, CRTP and CEH certified; Winja CTF winner at Nullcon 2022, and delivered the 'Exploit Writing 101' webinar and a phishing talk at null.
Security Consultant at Payatu covering AppSec, API, thick-client and KIOSK testing, network/Wi-Fi/RF, cloud and red teaming. OSCP, CRTP and CEH certified; Winja CTF winner at Nullcon 2022, and delivered the 'Exploit Writing 101' webinar and a phishing talk at null.
PAYATU

Soummya Mukhopadhyay

Security Consultant

CVEs published

Vulnerabilities discovered and responsibly disclosed. Each links to the Payatu advisory.

IDURAR ERP/CRM NoSQL injection

IDURAR ERP/CRM NoSQL injection SQL injection vulnerability via the component /api/login.
Enterprise & Mobile
SQL / NoSQL Injection
Critical
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.

SQL injection in School Management System 1.0

SQL injection in School Management System 1.0 allows remote attackers to modify or delete data, causing persistent changes to the application's content or behavior by using malicious SQL queries.
Web / CMS
SQL / NoSQL Injection
Critical
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.

CloudSchool v3.0.1 is vulnerable to Cross Site Scripting (XSS)

CloudSchool v3.0.1 is vulnerable to Cross Site Scripting (XSS).
Web / CMS
Cross-Site Scripting (XSS)
Medium
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.

Talks & appearances

Conferences, podcasts and workshops.
Hands-on Web3 Security Bootcamp (Hacking into Smart Contracts)
Soummya Mukhopadhyay (with Souvik Roy)
View Details
White arrow pointing diagonally up and right on black background.White arrow pointing diagonally up and right on black background.
19-20 Jun 2026
Exploit Writing 101 - Beyond Just Reporting Bugs | Payatu
Soummya Mukhopadhyay
View Details
White arrow pointing diagonally up and right on black background.White arrow pointing diagonally up and right on black background.
09-06-2023
Hacking into Smart Contracts
Soummya Mukhopadhyay
View Details
White arrow pointing diagonally up and right on black background.White arrow pointing diagonally up and right on black background.
19-20 Jun 2026
Rods and Hooks: The Phishing Trip
View Details
White arrow pointing diagonally up and right on black background.White arrow pointing diagonally up and right on black background.
21-12-2024

Articles by  

Soummya Mukhopadhyay

RF & Wireless Security
Diving into Signal Intelligence – SIGINT
November 3, 2023
8 min
RF & Wireless Security
Engineers
Researchers
For Security Leaders
Guides & tutorials
Hardware Security Assessment
How to Prevent Hacking Out of KIOSK
May 4, 2023
10 min
Hardware Security Assessment
Researchers
Engineers
For Security Leaders
Guides & tutorials

The Bandits

Conferences, podcasts and workshops.
Bandits
All

Abizer Naseem

Security Consultant
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.

Abizer Naseem

Security Consultant
Dark gray arrow pointing to the right on a transparent background.White arrow pointing diagonally upward to the right on a black square background.
All
Bandits

Ajay S.K

IoT Firmware Security Researcher
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.

Ajay S.K

IoT Firmware Security Researcher
Dark gray arrow pointing to the right on a transparent background.White arrow pointing diagonally upward to the right on a black square background.
All
Bandits

Akanksha Prasad

Co-Lead - Web Application
Dark gray arrow pointing to the right on a transparent background.Dark gray arrow pointing to the right on a transparent background.

Akanksha Prasad

Co-Lead - Web Application
Dark gray arrow pointing to the right on a transparent background.White arrow pointing diagonally upward to the right on a black square background.
Dark scene with vertical thin orange lines resembling distant illuminated bars or streaks against a black background and a faint horizontal red glow near the bottom.

Impressed by the work? Point it at your systems.

Bring the research depth behind these advisories to your own product, app or infrastructure.

Talk to an expert
White arrow pointing diagonally upward to the right on a black square background.White arrow pointing diagonally upward to the right on a black square background.White arrow pointing diagonally upward to the right on a black square background.
Black downward arrow on a white background.Black downward arrow on a white background.
Explore our research
White arrow pointing diagonally upward to the right on a black square background.White arrow pointing diagonally upward to the right on a black square background.
This is the default text value
White arrow pointing diagonally upward to the right on a black square background.White arrow pointing diagonally upward to the right on a black square background.
This is the default text value
White arrow pointing downward on a dark background.White arrow pointing downward on a dark background.
This is the default text value
White arrow pointing downward on a dark background.White arrow pointing downward on a dark background.
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.