Ask HN: Is there a list of known software attack vectors?

Most informational guides [0] feel like landing pages and enterprise tools [1] often point to internally profitable reporting services and bug bounty programs.

Individual postmortems are available, but a public aggregator or database of information feels too high value to not exist. Should I be looking at books? I would think they quickly become dated.

[0]: http://www.njamha.org/it/resources/WhitePaper_CyberAttackSurvivalChecklist.pdf

[1]: https://github.com/features/security