Professional / Community 1.6.31
Summary: PortSwigger released Burp Suite 1.6.31 on 2 December 2015, enhancing Burp Scanner to report issues from deferred interactions with the Burp Collaborator server, so asynchronous server-side injection vulnerabilities are reported even when the interaction occurs after scanning of the relevant item has finished. Each Burp session uses a unique identifier that can be saved in the state file, letting users reload completed scans and pick up new Collaborator interactions, and the release adds an "Issue activity" tab, scan start and end columns in the active scan queue, and an updated BlazeDS library fixing additional security vulnerabilities.
What's compelling: The release makes the case that some serious vulnerabilities, such as command injection in a shell script that runs over a weekend, only surface after testing ends, so a scan that reports nothing during its window is not the same as a clean result.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026