I'll add Shellcoder's Handbook to the list. Great intro to compiler/language flaws for programmers who don't know much about software security (like me).
The Shellcoder's Handbook: Discovering and Exploiting Security Holes
1 reader recommends it across 1 discussion