Kubernetes Goat is a "Vulnerable by Design" cluster environment to learn...
Sample vulnerable code and its exploit code
Erlik 2 - Vulnerable-Flask-App
Damn Vulnerable Java (EE) Application
VyAPI - A cloud based vulnerable hybrid Android App
OWASP Foundation Web Respository