Exercises
| Exercise | Avg. Time | Difficulty | Solved by | Tier | |
|---|---|---|---|---|---|
|
CVE-2026-24895: FrankenPHP Path Confusion RCE using Unicode | < 1 Hr. |  |
23 | PRO |
|
CVE-2026-XX888
This challenge covers the review of a CVE in a typescript codebase and its patch
|
|
97 | PRO | |
|
|
CVE-2025-XX864
This challenge covers the review of a CVE in a typescript codebase and its patch
|
< 1 Hr. | |
100 | PRO |
|
|
CVE-2026-XX050
This challenge covers the review of a CVE in a typescript codebase and its patch
|
|
88 | PRO | |
|
|
CVE-2021-437XX
This challenge covers the review of a CVE in a JavaScript codebase and its patch
|
|
130 | PRO | |
|
|
CVE-2021-X27X0
This challenge covers the review of a CVE in a JavaScript codebase and its patch
|
|
113 | PRO | |
|
|
CVE-2020-XX079
This challenge covers the review of a CVE in a javascript codebase and its patch
|
< 1 Hr. | |
159 | PRO |
|
|
CVE-2024-XX3X9
This challenge covers the review of a CVE in a python codebase and its patch
|
< 1 Hr. | |
81 | PRO |
|
|
CVE-2025-XXX57
This challenge covers the review of a CVE in a python codebase and its patch
|
< 1 Hr. | |
111 | PRO |
|
|
CVE-2026-XXX50
This challenge covers the review of a CVE in a python codebase and its patch
|
|
96 | PRO | |
|
|
CVE-2025-6X5X7
This challenge covers the review of a CVE in a python codebase and its patch
|
|
115 | PRO | |
|
|
CVE-2025-0X6X
This challenge covers the review of a CVE in a python codebase and its patch
|
< 1 Hr. | |
152 | PRO |
|
|
CVE-2024-X68X
This challenge covers the review of a CVE in a python codebase and its patch
|
< 1 Hr. | |
137 | PRO |
|
|
CVE-202X-15X7
This challenge covers the review of a CVE in a golang codebase and its patch
|
< 1 Hr. | |
70 | PRO |
|
|
CVE-2017-1XX74
This challenge covers the review of a CVE in a golang codebase and its patch
|
< 1 Hr. | |
100 | PRO |
|
|
CVE-2023-2758X
This challenge covers the review of a CVE in a golang codebase and its patch
|
< 1 Hr. | |
78 | PRO |
|
|
CVE-2025-NOID
This challenge covers the review of a CVE in a java codebase and its patch
|
< 1 Hr. | |
102 | PRO |
|
|
CVE-2022-2X457
This challenge covers the review of a CVE in a java codebase and its patch
|
< 1 Hr. | |
116 | PRO |
|
|
CVE-2025-627X0
This challenge covers the review of a CVE in a java codebase and its patch
|
< 1 Hr. | |
106 | PRO |
|
|
CVE-2025-X93X0
This challenge covers the review of a CVE in a golang codebase and its patch
|
< 1 Hr. | |
68 | PRO |
|
|
CVE-2025-X215X
This challenge covers the review of a CVE in a golang codebase and its patch
|
< 1 Hr. | |
75 | PRO |
|
|
CVE-2025-6X85
This challenge covers the review of a CVE in a python codebase and its patch
|
< 1 Hr. | |
135 | PRO |
|
|
CVE-2025-X942X
This challenge covers the review of a CVE in a python codebase and its patch
|
< 1 Hr. | |
129 | PRO |
|
|
CVE-2025-6X9X2
This challenge covers the review of a CVE in a python codebase and its patch
|
|
117 | PRO | |
|
|
CVE-2025-X270X
This challenge covers the review of a CVE in a python codebase and its patch
|
< 1 Hr. | |
144 | PRO |
|
|
CVE-2021-X5X8
This challenge covers the review of a CVE in a Golang codebase and its patch
|
< 1 Hr. | |
71 | PRO |
|
|
CVE-2025-5XX2X
This challenge covers the review of a CVE in a Golang codebase and its patch
|
< 1 Hr. | |
85 | PRO |
|
|
CVE-2022-24720
This exercise covers how one can leverage image processing in ActiveStorage to gain command execution.
|
1-2 Hr. |  |
42 | PRO |
|
|
CVE-2025-XX149
This challenge covers the review of a CVE in a Python codebase and its patch
|
< 1 Hr. | |
172 | PRO |
|
|
CVE-2025-6XX4
This challenge covers the review of a CVE published in 2025 in a go codebase and its patch
|
< 1 Hr. | |
75 | PRO |
Showing 31–60 of 191 exercises
Free Labs of the Month
