Secure Coding Labs

Practice real-world secure coding scenarios through hands-on challenges and labs.

Open Redirect

An Open Redirect occurs when an application accepts a user-supplied URL parameter and redirects to it without proper validation. Attackers...

low

Improper Artifact Integrity Validation

low CWE-494 CWE-345 CWE-353 CWE-829 github

This vulnerability occurs when build or deployment pipelines fail to verify the authenticity and integrity of artifacts (e.g., binaries, container...

medium

Improper Access Control

medium exploitation CWE-284 CWE-285 solidity move

Access control vulnerabilities in smart contracts arise when functions or state variables are insufficiently restricted, enabling unauthorised accounts to invoke...

medium

Unchecked External Calls

medium exploitation CWE-284 CWE-841 solidity

Unchecked External Calls in smart contracts occur when a contract calls external contracts or addresses without validating input, handling return...

medium

Broken Object Property Level Authorization

medium CWE-639 CWE-284 CWE-285 openapi

Broken Object Property Level Authorization occurs when APIs fail to enforce access controls on individual object properties, allowing attackers to...

medium

Unrestricted Resource Consumption

medium CWE-770 CWE-307 CWE-400 openapi

Unrestricted Resource Consumption occurs when APIs allow excessive use of computational, storage, or network resources without adequate limits, enabling attackers...

critical

Broken Authentication

critical CWE-613 CWE-798 CWE-287 CWE-384 CWE-522 javascript go openapi

Broken Authentication occurs when applications or APIs incorrectly implement authentication mechanisms, allowing adversaries to compromise credentials, bypass authentication controls, or...

high

Unrestricted Access to Sensitive Business Flows

high CWE-770 CWE-307 CWE-285 openapi

Unrestricted Access to Sensitive Business Flows occurs when APIs expose high-value operations (e.g., financial transactions, account changes, inventory manipulation) without...

high

Broken Function Level Authorization

high CWE-284 CWE-285 CWE-266 openapi

Broken Function Level Authorization occurs when APIs expose sensitive functions or administrative operations without enforcing proper role-based or permission-based access...

No matching labs found

Try adjusting your search keywords or language filter.