Secure Coding Labs

Practice real-world secure coding scenarios through hands-on challenges and labs.

Poor Code Quality

Poor code quality is not inherently a security vulnerability but often introduces exploitable weaknesses. For example, buffer overflow vulnerabilities in...

high

Insufficient Input Validation

high java android

Insufficient validation and sanitisation of data from external sources, such as user inputs or network data, can lead to severe...

low

Insecure Data Storage

low java swift android ios

Insecure data storage in mobile applications creates opportunities attackers to exploit vulnerabilities and gain unauthorised access to sensitive information. Remediation...

medium

Excessive Agency

medium artificial-inteligence

Excessive Agency is a vulnerability that arises when an LLM-enabled system performs harmful or unintended actions due to unexpected, ambiguous,...

low

CSS Injection

low CWE-838 python php django laravel

CSS Injection occurs when an attacker can inject malicious Cascading Style Sheets (CSS) into a web application, often through unvalidated...

medium

Open Policy Injection

medium CWE-20 go openpolicy

Open Policy Injection occurs when untrusted data is used as input in policy evaluations or rules within tools like Open...

low

Insecure UUID

low CWE-337 CWE-338 CWE-331 javascript typescript java ruby csharp

An Insecure UUID vulnerability arises when UUIDs (Universally Unique Identifiers) are used as a source of randomness, but non-random versions...

high

Improper Output Handling

high CWE-838 artificial-inteligence

Improper Output Handling occurs when outputs generated by Large Language Models (LLMs) are not properly validated, sanitised, or managed before...

high

Unbounded Consumption

high CWE-400 artificial-inteligence flask

Unbounded Consumption occurs when a Large Language Model (LLM) application permits excessive and uncontrolled inferences, allowing attackers to exploit resources...

No matching labs found

Try adjusting your search keywords or language filter.