Professional / Community 1.6.29

Summary: PortSwigger released Burp Suite Professional/Community 1.6.29 on 19 October 2015, adding a security fix to the BlazeDS library Burp uses for parsing AMF messages and disabling AMF support by default. The release also updated Burp's cookie jar to support the cookie path attribute and track multiple same-name cookies scoped to different application paths, added options for handling the unique identifier used to track Burp Collaborator interactions when saving and restoring state, and fixed a bug importing some custom CA certificates in PKCS#12 format.
Bottom line: The release notes warn that when two users share a state file and each continues testing from that point, Collaborator interactions can interfere, causing some Collaborator-based issues to be missed or incorrectly reported.

Read the original at PortSwigger Research ↗

Topics: Vulnerabilities & Patching
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026