OWASP (The Open Web Application Security Project) has a host of resources (local & linked) Try: http://www.owasp.org and: https://www.owasp.org/index.php/Category:OWASP_Java_Project