majic-banana

# Incorrect Access Control of Schedule's Deletion The system has a scheduling management feature, where each user's schedule is independent and private. However, the current system has a problem with...

# CSRF-oasys by [misstt123](https://github.com/misstt123) The entire system has a CSRF vulnerability, so there is no specific vulnerability point. The following uses the administrator's user addition function as an example for...

# Verification Code Reuse--misstt123\oasys [Logic Vulnerability] [Project Url](https://github.com/misstt123/oasys) This vulnerability can lead to burst attacks, which poses a threat to user information ## Vulnerable File ```java cn.gson.oasys.controller.login.LoginsControler; ``` ```java @RequestMapping(value="logins",method...