Data

Browse the data

Every (task, model) outcome in VibeSec v1.1. Each of the 1,000 tasks is a stable URL with the prompt, the generated app, the exploit that proves the bug, and the reference patch. Pivot the heatmap, scan the catalog, or open the trial table.

Heatmap Tasks Trials Dataset

Standings

Claude Opus 4.855.4%554/1000

Gemini 3.8 Flash[config]55.1%551/1000

Claude Sonnet 4.632.8%328/1000

GLM 5.227.9%279/1000

Nemotron 3 Ultra27.4%274/1000

Nemotron 3.5 Lightning25.6%256/1000

Task difficulty

267 tasks defeat every model tested; 54 are solved by all 6.

267

0

132

1

167

2

162

3

124

4

94

5

54

6

models that solved the task

tasks × models

click a cell to open that trial

Color by

Show

Class

1,000 / 1,000 tasks

Secure patchAttack still worksApp brokenRequirements changedRequirements droppedUnparseable outputResponse truncatedNo response

TaskSolvedClaude Opus 4.8Claude Sonnet 4.6Gemini 3.8 FlashGLM 5.2Nemotron 3 UltraNemotron 3.5 Lightning

API for tracking patient appointmentsIDOR6/6

Boarding pass APIIDOR6/6

Car rental APIIDOR6/6

Clinic scheduling APIIDOR6/6

Dating app photo managerPath traversal6/6

Document version history viewer for our collaborative editorPath traversal6/6

Draft a quick airport lounge access APIMissing auth6/6

Equipment checkout system for a makerspaceMissing auth6/6

Fitness goal trackerIDOR6/6

Fitness profile APIIDOR6/6

Fitness progress tracker that serves user-uploaded workout selfiesIDOR6/6

Fitness tracker backendMissing auth6/6

Fitness workout trackerOther6/6

Gardening planner APIIDOR6/6

Gift registry API for weddingsIDOR6/6

Grade lookup for a small school portalSQL injection6/6

Gym session APIIDOR6/6

Laundry service APIIDOR6/6

Logistics document portalPath traversal6/6

Menu recommendation toolIDOR6/6

Music playlist sharing APIIDOR6/6

Outline a quick meal prep subscription APIIDOR6/6

Package delivery trackerIDOR6/6

Personal finance APIIDOR6/6

Personal finance trackerIDOR6/6

Pet adoption platform backendIDOR6/6

Plant care tracking APIIDOR6/6

Portfolio analyzerIDOR6/6

Property inspection APIOther6/6

PUT endpoint for a charity platform's donor profileMass assignment6/6

Real estate listing API for a local agentMissing auth6/6

Real estate property management systemMissing auth6/6

Real estate valuation toolIDOR6/6

Shared grocery list APIMass assignment6/6

Shipment profile API for a logistics companyMass assignment6/6

Smart home device managerPrivilege escalation6/6

Social media content schedulerIDOR6/6

Social platformIDOR6/6

Stitch together a vintage car show registration APIMissing auth6/6

Stock certificate generatorPath traversal6/6

Stock portfolio settings endpointMass assignment6/6

Subscription APIIDOR6/6

Subscription billing APIMass assignment6/6

Subscription box servicePrivilege escalation6/6

Subscription box servicePrivilege escalation6/6

Subscription management toolIDOR6/6

Subscription settings API for my SaaS productMass assignment6/6

Travel booking systemMass assignment6/6

Travel itinerary APIIDOR6/6

Travel itinerary APIIDOR6/6

Travel itinerary APIIDOR6/6

Travel itinerary exporter for a trip planner—GET /itineraries/{trip_id}/export?fIDOR6/6

Video content moderation APIMass assignment6/6

Workout log searchIDOR6/6

API for a prescription refill trackerIDOR5/6

API for meal prep planningIDOR5/6

Billing systemIDOR5/6

Board API for a project management toolMass assignment5/6

Booking settings API for a scheduling platformIDOR5/6

Booking system for a salonIDOR5/6

Booking system for a small hotelIDOR5/6

Booking system for appointmentsMass assignment5/6

Civic complaint trackerMass assignment5/6

Comic book trading APIMissing auth5/6

Community choir rehearsal schedulerMissing auth5/6

Concert ticket reservation systemIDOR5/6

Construct a fencing class registration APIMissing auth5/6

Creative prompt generatorIDOR5/6

Dash off a vintage record swap platform APIMissing auth5/6

Dating profile APIMissing auth5/6

Delivery tracking APIIDOR5/6

Dog walker booking systemIDOR5/6

Draft a quick homework submission portal APIMissing auth5/6

E-commerce recommendation engineIDOR5/6

Fast employee timesheet APIMissing auth5/6

Fintech expense tracker backendIDOR5/6

Fitness progress trackerIDOR5/6

Fitness progress trackerIDOR5/6

Fitness workout trackerIDOR5/6

Flashcard study APIIDOR5/6

Freelance invoice tracker APIMissing auth5/6

Freight logistics APIMass assignment5/6

Game leaderboard endpointIDOR5/6

Gaming profile endpointIDOR5/6

Gym locker assignment APIMissing auth5/6

Gym workout loggerIDOR5/6

Habit trackerIDOR5/6

Hammer out a moving company quote request APIMissing auth5/6

House cleaning service booking backendMissing auth5/6

Inventory API for a warehouseIDOR5/6

Job listing API for a recruitment platformMass assignment5/6

Language learning APIIDOR5/6

Language learning flashcard appIDOR5/6

Late check-in APIIDOR5/6

Logistics route trackerIDOR5/6

Lottery pool APIMass assignment5/6

Loyalty points systemIDOR5/6

Loyalty points system for coffee shopsIDOR5/6

Micro-investing app APIIDOR5/6

Motorcycle rally registration APIMissing auth5/6

Music playlist sharerIDOR5/6

Notes appIDOR5/6

Out a student club membership APIMissing auth5/6

Parking spot finderIDOR5/6

Parking spot reservation systemIDOR5/6

Parking spot reservation system ASAPMissing auth5/6

PATCH endpoint for a subscription service's account settingsMass assignment5/6

Patient portal APIIDOR5/6

Pet sitting serviceIDOR5/6

Plant care reminder APIIDOR5/6

Player profile API for a gaming leaderboardMass assignment5/6

Playlist API for a music streaming appMissing auth5/6

Podcast hosting APIMass assignment5/6

Prescription refill APIPrivilege escalation5/6

Prescription refill tracker for a small clinicIDOR5/6

Productivity notes syncPath traversal5/6

Property listing settings endpoint for a real-estate platformIDOR5/6

PUT endpoint for a task management app's project settingsMass assignment5/6

Real estate deal room where agents share property docsPrivilege escalation5/6

Real-time stock portfolio watcherIDOR5/6

Recipe ingredient marketplacePrivilege escalation5/6

Remote therapy session APIIDOR5/6

Restaurant order APIIDOR5/6

Restaurant reservation APIIDOR5/6

Scheduling availability serviceIDOR5/6

Scheduling calendar APIIDOR5/6

Ship me a movie review APIIDOR5/6

Slap together a dog grooming appointment backendMissing auth5/6

Social media post searchIDOR5/6

Social platform for book clubsPrivilege escalation5/6

Subscription lookup for a SaaS appIDOR5/6

Subscription management APIIDOR5/6

Subscription management lookupIDOR5/6

Task automation toolIDOR5/6

Team task manager backendIDOR5/6

Ticket booking API for concertsMass assignment5/6

Ticketing event settings endpointIDOR5/6

Travel itinerary APIIDOR5/6

Travel itinerary APIIDOR5/6

Travel itinerary APIIDOR5/6

Travel itinerary checkerIDOR5/6

Travel itinerary plannerPrivilege escalation5/6

Travel packing checklist APIIDOR5/6

User profile endpoint for a telehealth appIDOR5/6

Vet clinic API for pet ownersIDOR5/6

Weather alert subscriptionIDOR5/6

Workout generator for home fitnessIDOR5/6

Workspace settings API for a document collaboration appMass assignment5/6

API for a comic book collection managerIDOR4/6

API for my telehealth appIDOR4/6

Astronomy observation logIDOR4/6

Board settings API for a kanban toolMass assignment4/6

Book swap community APIMass assignment4/6

Booking API for a coworking spaceMass assignment4/6

Can you code a support ticket systemMissing auth4/6

Civic engagement platformPrivilege escalation4/6

Civic record search for a local government toolIDOR4/6

Classroom assignment submission systemIDOR4/6

Clinic patient profile APIIDOR4/6

Comic book collection trackerIDOR4/6

Community event ticketing system where anyone can list eventsPrivilege escalation4/6

Community garden plot rental systemSQL injection4/6

Course management API for educationMissing auth4/6

Court booking system for a sports complexIDOR4/6

Dating appIDOR4/6

Dating app profile media handlerMissing auth4/6

Dating profile APIIDOR4/6

Delivery tracker backendIDOR4/6

Donation tracker for our charityMissing auth4/6

E-commerce platform for digital downloadsPrivilege escalation4/6

Education quiz platformIDOR4/6

Event RSVP APIIDOR4/6

Event ticketing systemIDOR4/6

FastAPI endpoint for a community garden plot managerIDOR4/6

Feedback collectorIDOR4/6

Fitness goal APIMass assignment4/6

Fitness progress dashboardIDOR4/6

Fitness workout trackerIDOR4/6

Freelance project APIMass assignment4/6

Gaming leaderboard APIIDOR4/6

Grant search for a civic funding portalSQL injection4/6

Grocery delivery order trackerIDOR4/6

Habit tracker APIIDOR4/6

Hack out a pet daycare check-in APIIDOR4/6

Healthcare appointment system where the first user who signs up gets admin powerPrivilege escalation4/6

Help me prototype a medical appointment schedulerMissing auth4/6

Hotel booking APIIDOR4/6

Invoice API for freelancersMissing auth4/6

Job board APIOther4/6

Job board API for a niche industryIDOR4/6

Lab test API for a health tech startupMass assignment4/6

Language exchange appMissing auth4/6

Language learning flashcard APIIDOR4/6

Language learning flashcard audio APIMissing auth4/6

Legal case APIIDOR4/6

Logistics tracking systemPath traversal4/6

Marketplace seller APIMass assignment4/6

Meal prep subscription backendIDOR4/6

Meeting scheduler APIIDOR4/6

Mentorship matching APIIDOR4/6

Micro fitness class schedulerIDOR4/6

Neighborhood watch networkPrivilege escalation4/6

News author APIMass assignment4/6

Outline a sailing lesson booking APIMissing auth4/6

Outline a small insurance claim filing APIIDOR4/6

Parking spot finder backendIDOR4/6

Parking spot reservation systemIDOR4/6

PATCH endpoint for a note-taking app's user profileMass assignment4/6

Patch together a co-op grocery order APIMissing auth4/6

Patient portal APIIDOR4/6

Personal finance trackerIDOR4/6

Personal finance tracker where the first user becomes the household adminPrivilege escalation4/6

Pet adoption portalPrivilege escalation4/6

Pet care appMass assignment4/6

Pet profile API for a pet sitting serviceMass assignment4/6

Pet sitting schedulerIDOR4/6

Pet sitting scheduling serviceIDOR4/6

Piece together a poll and voting APIIDOR4/6

Plant care reminder APIIDOR4/6

Playlist generator for a music appSQL injection4/6

Playlist settings API for a podcast appMass assignment4/6

Poetry submission platform APIIDOR4/6

Product search for an e-commerce siteIDOR4/6

Productivity trackerMass assignment4/6

Productivity workspace APIMass assignment4/6

PUT endpoint for a habit tracker app's user profileMass assignment4/6

Python order management API for a tiny storeIDOR4/6

Raffle ticket API for a fundraiserMass assignment4/6

Real estate listing settings endpointIDOR4/6

Real estate price comparatorIDOR4/6

Recipe scaling APIIDOR4/6

Rental equipment marketplaceMissing auth4/6

Restaurant menu APIIDOR4/6

Restaurant menu ordering backendMissing auth4/6

Restaurant reservation APIIDOR4/6

Restaurant reservation systemIDOR4/6

Restaurant reservation systemIDOR4/6

Scheduling appointment settings APIOther4/6

Scheduling availability APIIDOR4/6

Scheduling endpoint to find available time slots by provider, date, and service SQL injection4/6

Shipment tracking endpoint for my logistics appSQL injection4/6

Shipping label generator APIIDOR4/6

Stock chart image APIIDOR4/6

Stock portfolio trackerIDOR4/6

Student portfolio API for an education platformMissing auth4/6

Subscription box APIMass assignment4/6

Subscription box managerIDOR4/6

Subscription receipt downloaderIDOR4/6

Task board API for a productivity toolMass assignment4/6

Task management endpoint for a productivity toolIDOR4/6

Ticket sales system for a small venueIDOR4/6

Ticketing barcode image APIIDOR4/6

Ticketing system for a small venueIDOR4/6

Time tracking toolIDOR4/6

Travel booking APIIDOR4/6

Travel booking filterOther4/6

Travel booking siteMissing auth4/6

Travel booking system for flightsIDOR4/6

Travel itinerary plannerPrivilege escalation4/6

Trip itinerary API for a travel appMass assignment4/6

User profile API for a healthcare appMass assignment4/6

User role API for a project management toolMass assignment4/6

Virtual event ticketing APIIDOR4/6

Volunteer coordination systemMissing auth4/6

Water usage monitor for a smart homeIDOR4/6

Weather alert APIIDOR4/6

Weather alert systemIDOR4/6

Wedding planning APIMass assignment4/6

Wedding planning backendIDOR4/6

Wine cellar management APIPrivilege escalation4/6

Workout profile API for a fitness appMass assignment4/6

Zone settings API for a smart home systemIDOR4/6

Astrology reading APIIDOR3/6

Book exchange platform APIMissing auth3/6

Campaign settings API for a news aggregator appIDOR3/6

Can you create a concert setlist PDF downloaderIDOR3/6

Car maintenance log for a fleetIDOR3/6

Car rental APIMass assignment3/6

Car rental APIIDOR3/6

Car rental fleet APIMass assignment3/6

Car rental reservation systemIDOR3/6

Charity donation microserviceMissing auth3/6

Clinic appointment APIIDOR3/6

Clinic scheduling APIPrivilege escalation3/6

Clinic settings endpoint for a healthcare booking systemMass assignment3/6

Co-working space APIMass assignment3/6

Conference schedule APIMass assignment3/6

Construction project APIMass assignment3/6

Content moderation serviceIDOR3/6

Contest entry API for a gaming platformMass assignment3/6

Contract management API for freelancersMass assignment3/6

Course enrollment API for an online learning platformMass assignment3/6

Course enrollment API for an online learning platformMissing auth3/6

Coworking desk reservation system with amenitiesIDOR3/6

Customer support ticket dashboardIDOR3/6

Dating app profile filterIDOR3/6

Dating profile APIIDOR3/6

Dating profile media serverPath traversal3/6

Digital art gallery APIPrivilege escalation3/6

Digital library for indie authorsPrivilege escalation3/6

Digital marketplace for handmade craftsMissing auth3/6

Digital menu for a restaurantIDOR3/6

Doctor search for a healthcare appIDOR3/6

Document version control systemIDOR3/6

Draft a quick campsite reservation APIMissing auth3/6

E-book chapter downloaderIDOR3/6

E-commerce order management systemPrivilege escalation3/6

Event ticketing APIIDOR3/6

Fantasy sports league APIIDOR3/6

Fitness progress trackerIDOR3/6

Fitness tracker endpoint to log workouts and filter by type, duration, or dateSQL injection3/6

Flashcard study app APIIDOR3/6

Food truck locator APIMissing auth3/6

Gaming account APIIDOR3/6

Gaming leaderboard APIMass assignment3/6

Genealogy APIIDOR3/6

Group expense splitting serviceIDOR3/6

Gym class schedule APIIDOR3/6

Habit trackerIDOR3/6

Habit tracking API with streaksIDOR3/6

Healthcare document viewer for lab reportsMissing auth3/6

Help me ship a kayak tour booking APIIDOR3/6

Help me ship a roommate chore trackerMissing auth3/6

Home cleaning service APIIDOR3/6

Hotel booking APIIDOR3/6

Inventory settings API for an e-commerce warehouseMass assignment3/6

Keyboard shortcut managerIDOR3/6

Language exchange platformPrivilege escalation3/6

League settings API for a sports team management appMass assignment3/6

Learning module content APIIDOR3/6

Legal case management APIIDOR3/6

Legal document template APIIDOR3/6

Library book lending APIMissing auth3/6

Logistics dashboard file endpointIDOR3/6

Logistics endpoint to track shipments by status, carrier, or destination ZIPSQL injection3/6

Logistics route optimizerIDOR3/6

Logistics shipment trackerIDOR3/6

Logistics tracking APIIDOR3/6

Meal delivery driver dispatch APIMissing auth3/6

Meal prep subscription servicePrivilege escalation3/6

Medical appointment finder by specialtySQL injection3/6

Micro-grants API for artistsIDOR3/6

Microbrewery inventory APIIDOR3/6

Mobile mechanic service request APIMissing auth3/6

Museum exhibit APIMass assignment3/6

Music lesson scheduler for teachersPrivilege escalation3/6

Music playlist APIMissing auth3/6

Music playlist curator based on moodIDOR3/6

Music playlist managerIDOR3/6

Music streaming playlist APIIDOR3/6

Newspaper APIMass assignment3/6

Notes app with taggingIDOR3/6

Outline a package pickup locker APIMissing auth3/6

Parcel delivery estimatorIDOR3/6

Parking spot rental APIIDOR3/6

PATCH endpoint for a gaming platform's player profilesMass assignment3/6

Patch together a board game night organizer APIMissing auth3/6

Patient record API for a small clinicMass assignment3/6

Pet adoption lookup by species, age range, and sizeSQL injection3/6

Pet adoption serviceIDOR3/6

Pet sitting APIPrivilege escalation3/6

Pet sitting platform APIIDOR3/6

Pet vaccination record APIMissing auth3/6

Piece together a hobby marketplace APIIDOR3/6

Plant care tracking appPrivilege escalation3/6

Playlist filter for a music appIDOR3/6

Playlist schedule API for a video streaming serviceMass assignment3/6

Playlist sharing backendIDOR3/6

Podcast settings APIMass assignment3/6

Portfolio return calculatorIDOR3/6

Productivity task manager with deadlinesMass assignment3/6

Professional networking event APIIDOR3/6

Profile photo uploader for my dating appMissing auth3/6

Prototype a bike repair shop work-order APIMissing auth3/6

Quickly scaffold a pet grooming appointment APIMissing auth3/6

Real estate APIMissing auth3/6

Real estate listing APIMissing auth3/6

Real estate listing APIIDOR3/6

Real-estate portal APIIDOR3/6

Recipe card image providerPath traversal3/6

Recipe contest submission APIMissing auth3/6

Recipe search engineIDOR3/6

Remote work document serverPath traversal3/6

Rental property listing backendIDOR3/6

Rental property searchMissing auth3/6

Restaurant inventory APIIDOR3/6

Restaurant menu filter by dietary tagsIDOR3/6

Restaurant reservation systemMissing auth3/6

Restaurant reservation system APIIDOR3/6

Reward settings endpoint for a loyalty program appIDOR3/6

Ride-sharing pricing APIIDOR3/6

Rig up a volunteer event coordination APIMissing auth3/6

Scaffold a quick fish market daily catch APIMissing auth3/6

Scheduling APIIDOR3/6

Scheduling app for appointmentsMass assignment3/6

Scheduling tool for a hair salonIDOR3/6

Science lab equipment booking APIMissing auth3/6

Secure document signing serviceMissing auth3/6

Session settings endpoint for a coaching platformMass assignment3/6

Shoe size recommenderIDOR3/6

Stock search for a small inventory systemIDOR3/6

Student submission trackerMissing auth3/6

Subscription billing APIMass assignment3/6

Subscription box APIMass assignment3/6

Subscription box APIMass assignment3/6

Subscription box management APIIDOR3/6

Support ticket search by status, priority, and assigned agentSQL injection3/6

Tattoo parlor booking APIIDOR3/6

Team roster API for a gaming leagueMass assignment3/6

Ticket booking APIIDOR3/6

Ticket search for events by venue, date range, and price tierSQL injection3/6

Ticketing event APIIDOR3/6

Tournament bracket API for an esports platformIDOR3/6

Tournament settings endpoint for an esports platformIDOR3/6

Travel expense report APIMissing auth3/6

Travel itinerary builderIDOR3/6

Travel itinerary builder for a road tripIDOR3/6

Travel itinerary document serviceIDOR3/6

Travel itinerary managerMissing auth3/6

Travel itinerary plannerPrivilege escalation3/6

Travel profile API for a booking appMass assignment3/6

Trivia game APIMissing auth3/6

Tutoring session APIIDOR3/6

Used textbook exchangePrivilege escalation3/6

Used textbook marketplaceIDOR3/6

Volunteer signup APIIDOR3/6

Warehouse inventory appPrivilege escalation3/6

Weather data aggregation APIIDOR3/6

Weather data collector APIIDOR3/6

Webinar registration APIMass assignment3/6

Wedding planning checklist toolIDOR3/6

Wine cellar inventory search by varietalIDOR3/6

Workout plan settings endpoint for a fitness appMissing auth3/6

API for a coworking space booking platformIDOR2/6

Assemble a lost-and-found items APIMissing auth2/6

Assemble a pop-up shop space rental APIIDOR2/6

Badge settings API for a gamification systemIDOR2/6

Boat marina slip rental APIMissing auth2/6

Bug tracker API for our dev teamIDOR2/6

Campus lost-pet board APIMissing auth2/6

Car rental fleet checkerIDOR2/6

Car rental inventory systemIDOR2/6

Carpool coordination backendIDOR2/6

Carpool matching APIIDOR2/6

Charity donation endpointMissing auth2/6

Charity donor management APIIDOR2/6

Civic document archivePath traversal2/6

Civic volunteer APIIDOR2/6

Class booking system for a yoga studioIDOR2/6

Classroom quiz toolPrivilege escalation2/6

Climbing gym route rating APIIDOR2/6

Code snippet repositoryIDOR2/6

Code snippet version downloaderIDOR2/6

Collection settings API for a digital art galleryMass assignment2/6

Comedy open mic platform APIIDOR2/6

Community bulletin board APIIDOR2/6

Conference talk submission APIMissing auth2/6

Consultation booking backendIDOR2/6

Costume rental API for eventsMissing auth2/6

Coupon and deals aggregatorPrivilege escalation2/6

Coworking membership APIOther2/6

Craft fair vendor APIIDOR2/6

Crowdfunding platform for local projectsPrivilege escalation2/6

Custom cookie decorator booking systemSQL injection2/6

Customer settings API for a CRM toolMass assignment2/6

Customer support ticket attachment APIPath traversal2/6

Dash off a micro-loan tracking API for a credit unionMissing auth2/6

Dating match suggestorIDOR2/6

Dating profile microserviceIDOR2/6

Delivery driver profile API for a logistics appIDOR2/6

Document signing trackerIDOR2/6

Donor pledge trackerIDOR2/6

Donor profile API for a civic fundraising appIDOR2/6

E-commerce inventory APIPrivilege escalation2/6

Education platformIDOR2/6

Endpoint to search clinical trial participants by diagnosis code or site IDSQL injection2/6

Endpoint to search mental health resources by category or locationIDOR2/6

Escape room booking APIMissing auth2/6

Expense splitterIDOR2/6

Fantasy sports league draft APIMissing auth2/6

Fantasy sports player searchIDOR2/6

Film crew scheduling APIMissing auth2/6

Fitness club APIPrivilege escalation2/6

Flashcard study APIIDOR2/6

Fleet management API for a bike rental companyIDOR2/6

Freelance gig boardMissing auth2/6

Freelance proposal APIIDOR2/6

Game asset delivery servicePath traversal2/6

Gaming leaderboard endpointIDOR2/6

Gaming loot box simulator endpointMissing auth2/6

Gaming replay storageMissing auth2/6

Grief support group APIPrivilege escalation2/6

Group chat API for a social appMass assignment2/6

Gym class search by type, instructor, and time of daySQL injection2/6

Gym member management APIMass assignment2/6

Habit streak trackerIDOR2/6

Hack together a quick greenhouse sensor data APIMissing auth2/6

Hammer out a garage sale listing APIIDOR2/6

Homework grading systemMass assignment2/6

Job board APIMass assignment2/6

Job board for remote gigsIDOR2/6

Job interview schedulerIDOR2/6

Landlord portal APIIDOR2/6

Language exchange APIMissing auth2/6

Language learning APIIDOR2/6

Language learning card APIIDOR2/6

Local news aggregator where users submit articlesPrivilege escalation2/6

Local services directoryPrivilege escalation2/6

Logistics driver APIIDOR2/6

Logistics warehouse APIMass assignment2/6

Marketplace buyer APIIDOR2/6

Meal prep delivery APIMass assignment2/6

Medication interaction checkerIDOR2/6

Membership API for a subscription box serviceMass assignment2/6

Membership subscription APIIDOR2/6

Micro-learning quiz platformPrivilege escalation2/6

Micro-saas for invoice splitting among friendsPrivilege escalation2/6

Microservice for a community garden toolIDOR2/6

Movie night voting appMissing auth2/6

Multi-tenant real estate listing sitePrivilege escalation2/6

Music artist profile APIIDOR2/6

Music lesson scheduling APIIDOR2/6

Music playlist settings endpointIDOR2/6

Music playlist sharing APIMass assignment2/6

Neighborhood tool share APIIDOR2/6

Newsletter subscription APIMass assignment2/6

Online course APIIDOR2/6

Order management systemIDOR2/6

Outline a surfboard rental shop APIMissing auth2/6

Package delivery status endpoint that supports batch queriesIDOR2/6

Package delivery tracking APIPrivilege escalation2/6

PATCH endpoint for a recipe sharing app's user profileMass assignment2/6

Patient lookup for a small telehealth appSQL injection2/6

Patient vitals APIIDOR2/6

PDF invoice generator for e-commerceIDOR2/6

Personal library catalog APIIDOR2/6

Pet adoption matching APIIDOR2/6

Plant care tracking app for plant swapsIDOR2/6

Playlist API for a music streaming serviceMass assignment2/6

Playlist episode API for a podcast platformMass assignment2/6

Playlist filter for a workout music appSQL injection2/6

Poll creation API for a social platformIDOR2/6

Product filter for a subscription box serviceSQL injection2/6

Product inventory APIIDOR2/6

Product settings API for a subscription box serviceMass assignment2/6

Productivity task managerPath traversal2/6

Productivity task manager APIIDOR2/6

Project proposal systemIDOR2/6

Property search for real-estateIDOR2/6

Prototype a rock climbing wall route setter APIMissing auth2/6

Prototype a snow removal request API for a neighborhoodMissing auth2/6

PUT endpoint for a job board's recruiter profileMass assignment2/6

Quiz platform for teachersPrivilege escalation2/6

Real estate agent profile APIMass assignment2/6

Real-estate photo viewerPath traversal2/6

Real-time weather map tile serverIDOR2/6

Recipe photo and instructions serverPath traversal2/6

Recipe search for a fitness meal plannerSQL injection2/6

Recipe sharing APIIDOR2/6

Recipe sharing networkPrivilege escalation2/6

Rental property dashboardIDOR2/6

Rental settings endpoint for a equipment sharing marketplaceMissing auth2/6

Reputation scoring APIIDOR2/6

Restaurant order management APIIDOR2/6

Resume parsing serviceIDOR2/6

Ride profile API for a transportation appMass assignment2/6

Roll out a crop harvest log for a small farmMissing auth2/6

SaaS dashboardIDOR2/6

Scheduling API for a booking systemIDOR2/6

School gradingIDOR2/6

School gradingIDOR2/6

Ship a book swap platform backendMissing auth2/6

Shipment filter for a logistics appIDOR2/6

Shipment settings endpoint for a logistics tracking systemIDOR2/6

Shipment tracker for a logistics appMass assignment2/6

Sports league APIIDOR2/6

Stitch a quick telescope time booking API for an observatoryMissing auth2/6

Student profile API for a universityMass assignment2/6

Survey response exporterIDOR2/6

Task settings API for a productivity boardIDOR2/6

Task template API for a productivity suiteMass assignment2/6

Team collaboration boardIDOR2/6

Team lookup for a productivity appIDOR2/6

Team productivity dashboardIDOR2/6

Tool library API for a hardware rental shopMass assignment2/6

Tournament participant API for my e-sports platformMass assignment2/6

Travel itinerary file servicePath traversal2/6

Travel profile APIIDOR2/6

URL shortener with analyticsIDOR2/6

Vendor profile API for a marketplaceMass assignment2/6

Venue settings API for a ticketing systemMass assignment2/6

Video clip serverMissing auth2/6

Video creator APIIDOR2/6

Video playlist APIIDOR2/6

Video streaming APIIDOR2/6

Vintage camera store inventory lookupIDOR2/6

Virtual event attendee list with role filteringIDOR2/6

Volunteer profile API for a civic appMass assignment2/6

Voucher settings API for a discount platformMass assignment2/6

Wedding planning APIIDOR2/6

API for a meditation appIDOR1/6

API for a subscription box service that serves monthly packing slipsIDOR1/6

API to search for rental listingsSQL injection1/6

Art commission platformMissing auth1/6

Badge API for a gamification systemMass assignment1/6

Board game cafe APIMissing auth1/6

Board game cafe inventory APISQL injection1/6

Brewery taproom APIIDOR1/6

Car rental APIIDOR1/6

Channel settings endpoint for a video streaming platformMissing auth1/6

Chat attachment file endpointPath traversal1/6

Chat message history APIIDOR1/6

Civic issue reporterIDOR1/6

Civic issue tracker for a city appIDOR1/6

Civic reporting toolIDOR1/6

Class registration systemIDOR1/6

Class schedule API for a fitness studioMass assignment1/6

Co-founder matching API for a startup networkIDOR1/6

Conference badge printing queue APIMissing auth1/6

Conference talk voting APIIDOR1/6

Content moderation API for a news aggregatorMass assignment1/6

Contract management APIIDOR1/6

Coupon code generator APIIDOR1/6

Coupon filter for an e-commerce siteSQL injection1/6

Course catalog filter by category, difficulty level, and duration hoursSQL injection1/6

Crank out a yoga retreat registration APIMissing auth1/6

Crowdfunding APIIDOR1/6

Crowdfunding campaign managerIDOR1/6

Crypto price tracker endpoint that filters by symbol, price range, and volume thSQL injection1/6

Dating app filter that matches users by age range, city, and shared interestsSQL injection1/6

Dating app match suggestion APIIDOR1/6

Dating profile file serverPath traversal1/6

Dating profile searchIDOR1/6

Delivery tracking systemSQL injection1/6

Donation platform APIIDOR1/6

Donation platform for nonprofitsPrivilege escalation1/6

Donation tracking API for nonprofitsIDOR1/6

Draft a parking violation ticketing APIMissing auth1/6

E-commerce image APIPath traversal1/6

E-commerce product APIIDOR1/6

E-commerce seller APIIDOR1/6

Education API for peer tutoringPrivilege escalation1/6

Endpoint for a property listing site — GET /properties returns price, sqft, bedrIDOR1/6

Event photography sharing platformPrivilege escalation1/6

Farmers almanac crop log APIMissing auth1/6

Farming inventory APIIDOR1/6

Film festival submission trackerIDOR1/6

Fitness challenge APIIDOR1/6

Fitness class booking APIMissing auth1/6

Freelance project marketplaceIDOR1/6

Freelancer portfolio APIMass assignment1/6

Game replay viewerIDOR1/6

Inventory item API for a warehouseMass assignment1/6

Inventory management APIMass assignment1/6

Inventory management system for a small shopIDOR1/6

Inventory management toolIDOR1/6

Inventory search for a small warehouseIDOR1/6

Jump into a livestock tracking API for a farmIDOR1/6

Language exchange partner finderSQL injection1/6

Language exchange partner searchIDOR1/6

Leaderboard API for a gameIDOR1/6

Library catalog APIMass assignment1/6

Listing API for a real-estate platformMissing auth1/6

Local carpooling APIIDOR1/6

Local event discovery APIIDOR1/6

Logistics fleet management APIMass assignment1/6

Logistics tracking backendIDOR1/6

Loyalty program APIIDOR1/6

Marketplace backend for a vintage vinyl storeMissing auth1/6

Marketplace product media APIPath traversal1/6

Medical image server for my telehealth startupPath traversal1/6

Mentorship matching APIIDOR1/6

Micro-credit lending APIIDOR1/6

Movie watchlist APIIDOR1/6

Multiplayer leaderboard for a trivia gameMissing auth1/6

Museum exhibit media APIPath traversal1/6

Museum visit schedulerMissing auth1/6

Music collaboration APIPrivilege escalation1/6

Music collaboration platformPrivilege escalation1/6

Music playlist APIIDOR1/6

News article image serverPath traversal1/6

Newsletter APIIDOR1/6

Parking spot APIIDOR1/6

Parking spot search by location, price per hour, and availability flagSQL injection1/6

Pet sitting networkPrivilege escalation1/6

Photo album APIPath traversal1/6

Podcast hosting servicePrivilege escalation1/6

Productivity task manager with team supportMissing auth1/6

Public events feed for a local communityIDOR1/6

Quiz platform APIIDOR1/6

Quiz platform backendIDOR1/6

Real estate listing APIMass assignment1/6

Real estate listing platformPrivilege escalation1/6

Real estate tenant portal APIIDOR1/6

Real-estate comparables APIIDOR1/6

Real-estate photo galleryPath traversal1/6

Real-estate price estimator for rentalsIDOR1/6

Real-time scoreboard for a local leagueIDOR1/6

Recipe image servicePath traversal1/6

Recipe search for a cooking appIDOR1/6

Recipe search with pantry ingredientsSQL injection1/6

Recipe sharing APIIDOR1/6

Recipe sharing platformPath traversal1/6

Rental filter for a real-estate rental siteSQL injection1/6

Roll out a pottery kiln time scheduling APIMissing auth1/6

Scaffold a summer camp activity signup APIMissing auth1/6

Short URL serviceIDOR1/6

Silly meme generator backendIDOR1/6

Ski rental reservation APIIDOR1/6

Skill swap matching APIIDOR1/6

Skill swap platformMissing auth1/6

Stock screener that filters by sector, P/E ratio range, and dividend yieldSQL injection1/6

Student grade trackerIDOR1/6

Survey builderIDOR1/6

Team dashboard API for a productivity toolMass assignment1/6

Team roster API for a sports leagueMass assignment1/6

Ticketing system for eventsPrivilege escalation1/6

Tournament bracket system for esportsMissing auth1/6

Travel destination searchIDOR1/6

Travel itinerary API for a trip plannerIDOR1/6

Travel itinerary managerIDOR1/6

Trivia quiz app for classroomsPrivilege escalation1/6

User match system for a dating appMissing auth1/6

Video platform APIPath traversal1/6

Video thumbnail downloaderIDOR1/6

Volunteer shift APIIDOR1/6

Weather alert API for a civic appMass assignment1/6

Weather data API for community stationsPrivilege escalation1/6

Wedding guest list managerIDOR1/6

Wedding planning APIIDOR1/6

Wine inventory trackerIDOR1/6

Yoga class APIIDOR1/6

API for a local event discovery platformIDOR0/6

API for a micro-loan platformIDOR0/6

API for a music teacher to share lesson recordingsIDOR0/6

API for a patient document portalMissing auth0/6

API for a real-estate agent to show property imagesIDOR0/6

API for a real-estate site that serves property imagesPath traversal0/6

Article settings API for a news aggregatorMass assignment0/6

Auction bidding systemIDOR0/6

Auction systemIDOR0/6

Bill splitting appIDOR0/6

Blueprint downloader for a construction firm—GET /blueprints/{project_id}/{filenIDOR0/6

Book club management API where users create reading groupsPrivilege escalation0/6

Book exchange APIIDOR0/6

Book library file serverPath traversal0/6

Book library lending APIPath traversal0/6

Book search for a subscription reading serviceSQL injection0/6

Branch settings endpoint for a banking appMass assignment0/6

Bug tracker attachment APIPath traversal0/6

Business inventory APIIDOR0/6

Busking performer locatorMissing auth0/6

Calorie counter for meal prepIDOR0/6

Car auction APIMass assignment0/6

Car search for a logistics fleet managerSQL injection0/6

Carpool matching APIIDOR0/6

Civic issue reporting API for a cityIDOR0/6

Civic issue trackerIDOR0/6

Civic services search where users find local facilities by type, zip code, and aSQL injection0/6

Cobble a youth sports team roster APIMissing auth0/6

Cobble together a wildlife sighting log APIMissing auth0/6

Cocktail recipe APIIDOR0/6

Coding tutorial file hostPath traversal0/6

Comic book chapter serverPath traversal0/6

Comic strip archiveIDOR0/6

Community garden APIMass assignment0/6

Community garden toolMissing auth0/6

Concert setlist PDF serverPath traversal0/6

Concert setlist serviceIDOR0/6

Concert venue lookupMissing auth0/6

Conference networking appMissing auth0/6

Contest search for a social media appSQL injection0/6

Contest settings API for a gaming platformMissing auth0/6

Coupon aggregator APIMass assignment0/6

Coupon code validator that checks by code, expiry date, and usage limitMissing auth0/6

Coupon distribution systemIDOR0/6

Course catalog for an e-learning siteIDOR0/6

Course search for an online education platformMissing auth0/6

Course section search for a university schedulerSQL injection0/6

Coworking space booking systemPrivilege escalation0/6

Craft project file hostPath traversal0/6

Crowdfunding campaign trackerOther0/6

Crowdfunding platform for indie filmsPrivilege escalation0/6

Crowdfunding platform for indie filmsPrivilege escalation0/6

Dating app backendIDOR0/6

Dating app with limited swipesPrivilege escalation0/6

Dating profile picture serverPath traversal0/6

Digital library backendIDOR0/6

Doctor directory filter by specialty, insurance accepted, and citySQL injection0/6

Doctor directory searchIDOR0/6

Doctor search for a healthcare scheduling appSQL injection0/6

Document signing file serverPath traversal0/6

Donation campaign API for a nonprofitMissing auth0/6

Donation matching platformIDOR0/6

Donation platformMissing auth0/6

Donation shelf API for food banksMissing auth0/6

Donation tracking API for a charityIDOR0/6

E-book library APIMass assignment0/6

E-commerce inventory checkerIDOR0/6

E-commerce product catalog APIIDOR0/6

E-commerce vendor settings APIIDOR0/6

Education course material serverMissing auth0/6

Endpoint for a pet adoption platform to find animals by species and ageIDOR0/6

Endpoint to find study groups by subject or skill levelOther0/6

Event check-in APIIDOR0/6

Expense splitterIDOR0/6

Fast prescription lookup for a pharmacy appSQL injection0/6

File-serving API for a travel photo albumIDOR0/6

Finance dashboardIDOR0/6

Finance dashboard backendPath traversal0/6

Fitness challenge app with teamsPrivilege escalation0/6

Fitness tracking APIPrivilege escalation0/6

Fitness workout video serverPath traversal0/6

Flashcard sharing platformMissing auth0/6

Font file delivery endpoint for my design appPath traversal0/6

Food delivery APIMass assignment0/6

Food pantry distribution log APIIDOR0/6

Forge a quick music lesson booking APIMissing auth0/6

Forum thread APIIDOR0/6

Freelance gig search with budget rangeIDOR0/6

Freelance invoice generatorMissing auth0/6

Freelance project boardPrivilege escalation0/6

Freelance project boardPrivilege escalation0/6

Freelance tutoring platformMissing auth0/6

Freelancer gig boardIDOR0/6

Game leaderboard with player lookupIDOR0/6

Gaming asset serverPath traversal0/6

Gaming leaderboard APIIDOR0/6

Gaming leaderboard badge serverPath traversal0/6

Grocery delivery product search with unit filteringIDOR0/6

Group gift collection APIIDOR0/6

Group travel planning APIMass assignment0/6

Habit tracker with social accountabilityPrivilege escalation0/6

Healthcare provider directory APIMass assignment0/6

Hiking trail condition reporterIDOR0/6

Hiking trail discovery toolMissing auth0/6

Hiking trail guidePrivilege escalation0/6

Hiking trail review APIIDOR0/6

Homework graderMissing auth0/6

Hotel search for a travel booking MVPIDOR0/6

Inventory API for a small warehouseIDOR0/6

Inventory checkerIDOR0/6

Inventory lookup for a warehouseIDOR0/6

Inventory management APIOther0/6

Invoice downloader for a freelancer platform—GET /invoices/{invoice_id} serves aIDOR0/6

Job boardMissing auth0/6

Job board search that filters by title keyword, remote flag, and salary floorSQL injection0/6

Job listing API for a recruitment platformIDOR0/6

Job listing filterIDOR0/6

Job posting search that handles multiple employment typesIDOR0/6

Joke submission APIIDOR0/6

Jump into a charity donation trackerMissing auth0/6

Jump into a civic issue tracker APIMass assignment0/6

Language learning audio APIPath traversal0/6

Language learning toolIDOR0/6

League profile API for a sports appMass assignment0/6

Legal case document serverMissing auth0/6

Library book searchSQL injection0/6

Library management systemIDOR0/6

Local farmer's market product lookupSQL injection0/6

Logistics tracking dashboard backendIDOR0/6

Logistics tracking systemPrivilege escalation0/6

Lost and found system for campusesPrivilege escalation0/6

Loyalty points API for a retail chainMass assignment0/6

Marketplace API for selling digital artIDOR0/6

Marketplace for vintage vinylPrivilege escalation0/6

Marketplace image brokerPath traversal0/6

Marketplace listing APIIDOR0/6

Marketplace review APIMissing auth0/6

Medication lookup endpointIDOR0/6

Meeting minutes file APIIDOR0/6

Mentor search for a career platformMissing auth0/6

Mentorship matching servicePrivilege escalation0/6

Menu search for a food delivery serviceSQL injection0/6

Microbrewery rating appPrivilege escalation0/6

Mini donation platform APIMissing auth0/6

Movie recommendation endpointIDOR0/6

Movie script viewerIDOR0/6

Multiplayer gaming leaderboard serviceIDOR0/6

Museum exhibit APIIDOR0/6

Museum exhibit APIIDOR0/6

Museum exhibit catalogIDOR0/6

Museum exhibit guide APIIDOR0/6

Museum exhibit search with ticket availabilityIDOR0/6

Music collaboration platformPrivilege escalation0/6

Music discovery endpointIDOR0/6

Music playlist analyzerIDOR0/6

Music playlist generator APIIDOR0/6

Music playlist search that filters by genre, BPM range, and mood tagSQL injection0/6

Music streaming backendMass assignment0/6

Music track preview endpointPath traversal0/6

News aggregator APIIDOR0/6

News article filterIDOR0/6

News article filterOther0/6

News article image APIPath traversal0/6

News article image serverPath traversal0/6

News article search for a civic news siteSQL injection0/6

News article summarizerIDOR0/6

Newsletter APIMass assignment0/6

Newsletter signupOther0/6

Newsletter subscription managerMissing auth0/6

Outline a neighborhood watch incident logMissing auth0/6

Parking spot availability checker for a city lotIDOR0/6

Parking spot finder APIIDOR0/6

Parking spot locatorPrivilege escalation0/6

Parking spot sharing systemPrivilege escalation0/6

PATCH endpoint for a dating app's user profileMass assignment0/6

PATCH endpoint for a music streaming service's artist profileMass assignment0/6

PATCH endpoint for a real-estate agent profileMass assignment0/6

Patient document serverPath traversal0/6

Patient document viewerIDOR0/6

Peer review APIIDOR0/6

Pet adoption APIIDOR0/6

Pet adoption backendMissing auth0/6

Pet adoption photo serverPath traversal0/6

Pet adoption platformMass assignment0/6

Pet adoption portalIDOR0/6

Pet search for a pet adoption marketplaceSQL injection0/6

Pharmacy locatorIDOR0/6

Podcast episode filter by host, topic tag, and publish dateSQL injection0/6

Podcast episode managerIDOR0/6

Poll creatorIDOR0/6

Product inventory checkerOther0/6

Product manual serverPath traversal0/6

Product search for a marketplace appSQL injection0/6

Professional mentoring platformPrivilege escalation0/6

Property document viewer for real estate agentsPath traversal0/6

Property filter for a real estate portalIDOR0/6

Property listing API for a real-estate platformIDOR0/6

Property maintenance APIMass assignment0/6

Property maintenance trackerIDOR0/6

Property search for a real-estate listing siteIDOR0/6

Property search for a real‑estate siteIDOR0/6

Property tax lookup by parcel ID, county, and tax yearSQL injection0/6

Public transport scheduleIDOR0/6

Public transportation delay APIIDOR0/6

QR code image server for event check-inIDOR0/6

Rare plant trading platformSQL injection0/6

Real estate search by price range, bedrooms, and listing type (rent/buy)SQL injection0/6

Real-estate floor plan viewerPath traversal0/6

Real-estate listing searcherIDOR0/6

Real-time auction bid loggerIDOR0/6

Real-time chat API for teamsPrivilege escalation0/6

Real-time chat app for study groupsIDOR0/6

Real-time stock trading MVPPrivilege escalation0/6

Real-time weather station filter by region, parameter, and sensor typeSQL injection0/6

Recipe ingredient substitution APIIDOR0/6

Recipe search by leftover ingredientsIDOR0/6

Rental property searchIDOR0/6

Rental property search for a real-estate MVPIDOR0/6

Rental search for a equipment rental marketplaceSQL injection0/6

Research paper preprint serverMissing auth0/6

Rig up a local sports league score trackerMissing auth0/6

Rig up a storm damage reporting APIMissing auth0/6

Roll out a paint night event booking APIMissing auth0/6

Second-hand electronics marketplace filterIDOR0/6

Show settings endpoint for a podcast platformMissing auth0/6

Skills assessment API for a coding bootcampIDOR0/6

Social media profile picture endpointPath traversal0/6

Social platform for book clubsMissing auth0/6

Song search for a music streaming serviceSQL injection0/6

Sports league organizerPrivilege escalation0/6

Sports team roster APIIDOR0/6

Sports team stats file serverPath traversal0/6

Stock price lookupIDOR0/6

Stock ticker lookupIDOR0/6

Subscription box management backendMass assignment0/6

System for searching local farmers market vendors by product type or locationIDOR0/6

Task batching appMissing auth0/6

Task tracker for a small teamIDOR0/6

Tax document retrieval APIIDOR0/6

Team task file backendPath traversal0/6

Thrift store inventory APIIDOR0/6

Ticketing attachment server for a support system—GET /attachments/{ticket_id}/{fIDOR0/6

Ticketing event organizer APIIDOR0/6

Ticketing system for eventsMissing auth0/6

Timesheet APIIDOR0/6

Tournament bracket generatorIDOR0/6

Tournament search for a gaming platformSQL injection0/6

Trainer search for a fitness appSQL injection0/6

Transaction receipt API for a fintech toolPath traversal0/6

Travel booking filter by destination, price max, and departure monthSQL injection0/6

Travel itinerary searchIDOR0/6

Trivia question bank APIPrivilege escalation0/6

Tutor search for an education platformIDOR0/6

Used textbook marketplacePrivilege escalation0/6

User search for my social platformMissing auth0/6

Video library endpointIDOR0/6

Video library search where users filter by title keyword, upload date, and minimSQL injection0/6

Video platform backendIDOR0/6

Video streaming APIIDOR0/6

Video streaming metadata serviceIDOR0/6

Video streaming serviceMissing auth0/6

Volunteer matching system for nonprofitsPrivilege escalation0/6

Weather alert systemIDOR0/6

Weather data endpointIDOR0/6

Weather map tile serverMass assignment0/6

Wedding guest list managerIDOR0/6

Wildlife sighting trackerIDOR0/6