I am looking for some open source/free vulnerable Java based applications. It can be web application, desktop application or any other. I need them to do some experiments in my research work. They could be very small or medium size but it's nice if it is like real world application.
The vulnerabilities may include XSS attacks, accessing unauthorized data, SQL-injection etc.
I already tried OWASP applications but need some more. Could somebody please suggest where can I find such vulnerable/exploitable Java applications?