Professional 1.7.12
Summary: PortSwigger released Burp Suite Professional 1.7.12 on 18 November 2016, updating the Burp Collaborator server to capture SMTP interactions and adding two related Burp Scanner checks. The new checks report SMTP external service interaction, which flags application functions that can generate an email to an arbitrary address, and SMTP header injection, which flags cases where injected email headers cause an application-generated email to be copied to an arbitrary address.
What you should know: Users running a private Burp Collaborator server must upgrade their deployment to get the new SMTP capture, and for every SMTP-related issue the Collaborator records the full SMTP conversation as evidence, which may also expose details of the technologies and infrastructure in use.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026