Flagged Local File Inclusion via Language Cookie Leads to Arbitrary File Read

Local File Inclusion via Language Cookie Leads to Arbitrary File Read | Flagged

Lab Link Lab: Flagged Overview Flagged is a long-running online storefront that manufactures custom sailing flags and supports multiple languages through a language-switching feature. The appl...

Jun 4, 2026 A01 - Broken Access Control, Local File Inclusion

Fault Banking Exposed Git Repository Leads to Administrative Credential Disclosure

Exposed Git Repository Leads to Administrative Credential Disclosure | Fault Banking

Lab Link Lab: Fault Banking Overview Fault Banking is a regional banking platform built on Flask that exposes both customer-facing and administrative authentication portals. During assessment,...

Jun 4, 2026 A02 - Security Misconfiguration, Source Code Disclosure

NoSQL Injection via Search Filter Object Leads to Hidden Rental Disclosure | SwiftSearch Hotels

Lab Link Lab: SwiftSearch Hotels Overview SwiftSearch Hotels is a hotel and rental booking platform that recently migrated its search functionality to a JSON-based API. Instead of relying on t...

Jun 3, 2026 A05 - Injection, NoSQL Injection

GraphQL Role Parameter Abuse Leads to Restricted Medical Note Disclosure | Clearance

Lab Link Lab: Clearance Overview Clearance is a healthcare management portal used by medical staff to manage patient information and clinical records. The application uses GraphQL for data re...

Jun 3, 2026 A01 - Broken Access Control, Privilege Escalation

Authentication Bypass – Direct Dashboard Access | Pivot HR

Lab Link Lab: Pivot HR Overview Pivot HR is a small-business HR management platform that provides payroll and employee management functionality. The application appears to enforce a multi-fac...

Jun 3, 2026 A01 - Broken Access Control, Authentication Bypass

SQL Injection in Voucher Search Leads to Executive Voucher Disclosure | Voucher Vault

Lab Link Lab: Voucher Vault Overview Voucher Vault is an internal employee rewards platform used by Redzone Insurance to distribute and manage company gift cards and incentive vouchers. The a...

Jun 2, 2026 A05 - Injection, SQL Injection

SQL Injection via Issue Identifier Parameter | Trace Control

Lab Link Lab: Trace Control Overview Trace Control is an internal issue tracking platform used by a small platform engineering team. The application exposes issue records through a numeric ide...

Jun 2, 2026 A05 - Injection, SQL Injection

OS Command Injection via Archive Export Filename | Parchive

Lab Link Lab: Parchive Overview Parchive is a legal document archival platform that allows users to export case files into downloadable archives. During testing, the archive export functional...

Jun 1, 2026 A05 - Injection, OS Command Injection

IDOR vulnerability in Briarcliff Foundation grant application workflow

IDOR – Unauthorized Grant Approval via Workflow Manipulation | Briarcliff Foundation

Lab Link Lab: Briarcliff Foundation Overview Briarcliff Foundation provides an online portal where applicants can submit grant proposals and track their review status. Applicants are expected...

Jun 1, 2026 A01 - Broken Access Control, IDOR

BugVault CVE-2025-29927 Next.js Middleware Authorization Bypass

Next.js Middleware Authorization Bypass (CVE-2025-29927) | BugVault

Lab Link Lab: BugVault Overview BugVault is a bug bounty management platform that restricts administrative functionality behind a Next.js middleware authorization layer. The challenge descrip...

Jun 1, 2026 Penetration Testing, CVE-2025-29927 (Next.js Middleware Authorization Bypass)