OWASP

Security reference that still matters because it keeps common failures named and documented publicly.

https://owasp.org