SQL Injection in Voucher Search Leads to Executive Voucher Disclosure | Voucher Vault

Lab Link Lab: Voucher Vault Overview Voucher Vault is an internal employee rewards platform used by Redzone Insurance to distribute and manage company gift cards and incentive vouchers. The a...

Jun 2, 2026 A05 - Injection, SQL Injection

SQL Injection via Issue Identifier Parameter | Trace Control

Lab Link Lab: Trace Control Overview Trace Control is an internal issue tracking platform used by a small platform engineering team. The application exposes issue records through a numeric ide...

Jun 2, 2026 A05 - Injection, SQL Injection

OS Command Injection via Archive Export Filename | Parchive

Lab Link Lab: Parchive Overview Parchive is a legal document archival platform that allows users to export case files into downloadable archives. During testing, the archive export functional...

Jun 1, 2026 A05 - Injection, OS Command Injection

IDOR vulnerability in Briarcliff Foundation grant application workflow

IDOR – Unauthorized Grant Approval via Workflow Manipulation | Briarcliff Foundation

Lab Link Lab: Briarcliff Foundation Overview Briarcliff Foundation provides an online portal where applicants can submit grant proposals and track their review status. Applicants are expected...

Jun 1, 2026 A01 - Broken Access Control, IDOR

BugVault CVE-2025-29927 Next.js Middleware Authorization Bypass

Next.js Middleware Authorization Bypass (CVE-2025-29927) | BugVault

Lab Link Lab: BugVault Overview BugVault is a bug bounty management platform that restricts administrative functionality behind a Next.js middleware authorization layer. The challenge descrip...

Jun 1, 2026 Penetration Testing, CVE-2025-29927 (Next.js Middleware Authorization Bypass)

Authentication Bypass via Forged Remember-Me Cookie | Bump Key

Authentication Bypass via Forged Remember-Me Cookie | Skein

Lab Link Lab: Skein Overview Bump Key is a community platform that implements a custom “Remember Me” feature to persist user authentication between sessions. Instead of using securely generat...

May 31, 2026 A07 - Authentication Failures, Authentication Bypass

Cross-Site Scripting (XSS) – Inadequate Input Filter Bypass | Palisade

Lab Link Lab: Palisade Overview Palisade is a mountaineering equipment rental platform that allows users to configure equipment sizing preferences before renting gear. The application include...

May 30, 2026 A05 - Injection, Cross-Site Scripting (XSS)

Local File Inclusion – Arbitrary File Read | Traverse

Lab Link Lab: Traverse Overview Traverse is a documentation portal for a developer-tools startup. The site serves documentation pages dynamically using a filename supplied through a URL parame...

May 30, 2026 A02 - Security Misconfiguration, Local File Inclusion

Information Disclosure – Sensitive Resource Exposure via robots.txt | Sundial Observatory

Lab Link Lab: Sundial Observatory Overview Sundial Observatory maintains a public website containing information about astronomy events, member activities, and club operations. The site’s adm...

May 30, 2026 A02 - Security Misconfiguration, Information Disclosure

Information Disclosure – Redirect Debug Comment Exposure | Redirect Run

Lab Link Lab: Redirect Run Overview Quikpay uses short receipt URLs that redirect customers to a friendly purchase confirmation page. From a normal user perspective, the redirect happens inst...