| 2016-12-12 | Splunk Enterprise <= 6.4.3 服务器端请求伪造漏洞 | re4lity | 5288 | |
| 2016-12-11 | 12月Android安全补丁风险评估 | ourren | 2230 | |
| 2016-12-11 | Safari浏览器JavaScript引擎JavaScriptCore的漏洞利用技术 | ourren | 2612 | |
| 2016-12-09 | Roundcube v1.2.2命令执行漏洞分析 | ourren | 2257 | |
| 2016-12-08 | 通过EVENTVWR.EXE和注册表劫持绕过UAC | re4lity | 2656 | |
| 2016-12-08 | 利用 XML Signature 攻击绕过 SAML 2.0 单点登录 | re4lity | 1723 | |
| 2016-12-07 | Android：Native层文件解析漏洞分析 | 御安全 | 6353 | |
| 2016-12-07 | Exploiting 64-bit IE on Windows 8.1 – The Pwn2Own Case Study | BaCde | 3345 | |
| 2016-12-05 | [0day] Bypassing Apple's System Integrity Protection | ourren | 2347 | |
| 2016-12-03 | Google: Announcing OSS-Fuzz: Continuous Fuzzing for Open Source Software | ourren | 2770 | |
| 2016-12-03 | Analysis of multiple vulnerabilities in AirDroid | ourren | 3044 | |
| 2016-12-03 | 【漏洞预警】Apache Tomcat远程代码执行漏洞(CVE-2016-8735) | re4lity | 3401 | |
| 2016-12-02 | 玩转CSRF之挖洞实例分享 | 0h1in9e | 7727 | |
