Professional 1.6.37
Summary: Burp Suite Professional 1.6.37, released 12 February 2016, added Scanner checks that report all instances where user input is returned in application responses, both reflected and stored. Because many applications reflect input such as the full URL in responses, the new checks are off by default and must be enabled in the Scanner options.
What you should know: The feature was built for manual testers, and leaving it off by default means the reflected and stored input instances it would surface stay out of view until someone turns the checks on.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026