[Full-disclosure] Microsoft PowerPoint 0-day Vulnerability FAQ document written

I have written FAQ document including 33 items about the recently reported 0-day vulnerability in PowerPoint. This vulnerability is being exploited by Trojan horse including keylogger features. The document entitled as Microsoft PowerPoint 0-day Vulnerability FAQ is located at my SecuriTeam Blogs...

CVE-2005-3511: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Spymac Web OS 4.0 allow remote attackers to inject arbitrary web script or HTML via a the blogs module, including the 1 curr parameter in index.php, 2 inspire, 3 system, or 4 title parameter in blognewentry.php, 5 entry parameter in...