Professional / Community 2024.9.5

Summary: PortSwigger released Burp Suite Professional and Community version 2024.9.5 on 7 November 2024, adding a Default Intruder side panel layout setting that lets users configure the Intruder sidebar independently from other sidebars. The release also fixed a Windows bug where Intruder attacks would not start if the attack configuration was copied from a previous tab with payload encoding enabled but no encoding characters specified.
What you should know: The fix targets a Windows failure that silently blocked Intruder attacks from starting when a copied configuration carried payload encoding with no encoding characters set, so teams relying on reused attack configs should confirm they are on 2024.9.5.

Read the original at PortSwigger Research ↗

Topics: Vulnerabilities & Patching
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026