VulnerableApp-facade is probably most modern lightweight distributed farm of Vulnerable Applications built for handling wide range of vulnerabilities across tech stacks.

OWASP ZAP add-on for finding vulnerabilities in File Upload functionality.

Vulnerable Application specifically containing vulnerabilities related to jsp.