Some potentially useful links:

Slides from talk: as HTML or .odp

Articles - Some of these are getting a bit dated, the author may not be trustworthy either:

• Authentication bypass
• SQL injection
• Cross-site scripting
• Cross-site request forgery
• Remote file include
• HTTP response splitting

• BT Home Hub
• Original BT Home Hub article (GNUCitizen)
• Cisco Linksys WAG54GS
• Xerox WorkCenter (powerpoint, unfortunately, seems ok in OpenOffice, though)
• Router hacking challenge
• A-Link WL54AP3 and WL54AP2
• Airtel DSL modems