| 2016-12-11 | 12月Android安全补丁风险评估 | ourren | 2278 | |
| 2016-12-11 | Safari浏览器JavaScript引擎JavaScriptCore的漏洞利用技术 | ourren | 2713 | |
| 2016-12-09 | Roundcube v1.2.2命令执行漏洞分析 | ourren | 2287 | |
| 2016-12-08 | 通过EVENTVWR.EXE和注册表劫持绕过UAC | re4lity | 2856 | |
| 2016-12-08 | 利用 XML Signature 攻击绕过 SAML 2.0 单点登录 | re4lity | 1781 | |
| 2016-12-07 | Android：Native层文件解析漏洞分析 | 御安全 | 8519 | |
| 2016-12-07 | Exploiting 64-bit IE on Windows 8.1 – The Pwn2Own Case Study | BaCde | 3808 | |
| 2016-12-05 | [0day] Bypassing Apple's System Integrity Protection | ourren | 2422 | |
| 2016-12-03 | Google: Announcing OSS-Fuzz: Continuous Fuzzing for Open Source Software | ourren | 2949 | |
| 2016-12-03 | Analysis of multiple vulnerabilities in AirDroid | ourren | 3437 | |
| 2016-12-03 | 【漏洞预警】Apache Tomcat远程代码执行漏洞(CVE-2016-8735) | re4lity | 3817 | |
| 2016-12-02 | 玩转CSRF之挖洞实例分享 | 0h1in9e | 10073 | |
| 2016-12-02 | Bypassing CSP using polyglot JPEGs | vicker | 9636 | |
