| 2016-12-11 | 12月Android安全补丁风险评估 | ourren | 2224 | |
| 2016-12-11 | Safari浏览器JavaScript引擎JavaScriptCore的漏洞利用技术 | ourren | 2612 | |
| 2016-12-09 | Roundcube v1.2.2命令执行漏洞分析 | ourren | 2257 | |
| 2016-12-08 | 通过EVENTVWR.EXE和注册表劫持绕过UAC | re4lity | 2653 | |
| 2016-12-08 | 利用 XML Signature 攻击绕过 SAML 2.0 单点登录 | re4lity | 1723 | |
| 2016-12-07 | Android：Native层文件解析漏洞分析 | 御安全 | 6317 | |
| 2016-12-07 | Exploiting 64-bit IE on Windows 8.1 – The Pwn2Own Case Study | BaCde | 3337 | |
| 2016-12-05 | [0day] Bypassing Apple's System Integrity Protection | ourren | 2343 | |
| 2016-12-03 | Google: Announcing OSS-Fuzz: Continuous Fuzzing for Open Source Software | ourren | 2767 | |
| 2016-12-03 | Analysis of multiple vulnerabilities in AirDroid | ourren | 3036 | |
| 2016-12-03 | 【漏洞预警】Apache Tomcat远程代码执行漏洞(CVE-2016-8735) | re4lity | 3396 | |
| 2016-12-02 | 玩转CSRF之挖洞实例分享 | 0h1in9e | 7679 | |
| 2016-12-02 | Bypassing CSP using polyglot JPEGs | vicker | 6682 | |
