Professional 1.6.06
Summary: Burp Suite Professional 1.6.06, released Monday, 20 October 2014, adds Scanner engine checks that automatically report new issue types including Perl, PHP, Ruby and server-side JavaScript code injection, file path manipulation, serialized objects in HTTP messages, and several DOM-based issues such as client-side JSON and XPath injection, document domain manipulation, link manipulation and DOM data manipulation. The release also improves scanning logic for existing checks and fixes bugs affecting the skip-server-side-injection-tests option, session handling rules with the sessions tracer, auto-generation of CA-signed per-host SSL certificates, and startup hangs when reloading certain extensions.
Why it matters: The new checks cover injection and DOM-based classes that scanners often missed, so teams relying on older Burp versions were shipping code with those gaps unreported.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026