SQL Injection
Reading the Security Tea Leaves
Observations on Modern Cyber Crime and Espionage - Wade Baker, Verizon
Evaluation of Web Application Vulnerability Scanners