http://sec.drorshalev.com/ is one of my favorite sites,the exploits on this page are updated daily and they are all harmless so normal users can observe how these exploits work without the fear of ****** them system.

cheers