An incident response blog post containing 0day vuln (security.infoteam.ch)

It's a good case for training the attention to spot obvious vulnerabilities in the code.