GitHub repository: vulnerable-code/zipdu
Description: zipdu is a webservice implementation vulnerable to zip bombs and directory traversals. Written in multiple different languages