The Web Advisory Group has a UCAR Web Security area published on its wiki with links to great resources like the OWASP Top 10 Exploits (updated every year), educational tools like the presentatioins from UCAR's Web Application Security Training, Google's Gruyere project and much more.
Check out all the resources at:
