Software Vulnerability Scanner

Summary: A Burp Suite extension called Software Vulnerability Scanner, authored by Vulners.com and updated 21 October 2025 at version 1.4.2, scans HTTP responses to fingerprint software and checks detected versions against the Vulners.com vulnerability database. It reports CVEs, advisories, and available exploits for the versions it identifies, and PortSwigger states it makes no warranty about third-party extensions' quality or usefulness.
Why it matters: The tool's findings are only as current as the Vulners.com database it queries, and PortSwigger explicitly disclaims warranty on extensions written by third parties - so the accuracy of every CVE and exploit path it surfaces rests on a dependency outside both your scanner vendor and your own team.

Read the original at PortSwigger Research ↗

Topics: Vulnerabilities & Patching
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026