Open Web Application Security Project (OWASP)

A list of the most critical security risks to web applications.