The Hacker Play Book by Peter Kim is a very original book. It is written as a story that describes each step in compromising a real target. It is focused on network security, but in some chapters, application vulnerabilities are explained in detail, and the detail is perfect to get some real ideas about how to exploit a bug to create great reports. Remember the importance of being detailed and understandable when reporting a bug.