OWASP Top 10 - 2017 [pdf]
owasp.org