I haven't browsed it in about five years, but the Google Hack Database (http://www.hackersforcharity.org/ghdb/) had a lot of these kind of things.