Professional 1.6.04

Summary: PortSwigger released Burp Suite Professional 1.6.04 on Wednesday, 13 August 2014, fixing minor bugs in the JavaScript code analysis engine that caused false negatives or performance problems in detecting certain DOM-based vulnerabilities. The release also fixed a bug affecting restoration of saved Intruder attacks, a bug that hid the Jython or JRuby install button for some BApps, and a Scanner UI hang when modifying issue severity or confidence, and added default Proxy match/replace rules to remove HSTS response headers and disable browser XSS protection.
What's compelling: The release notes state that the JavaScript analysis bugs produced false negatives in DOM-based vulnerability detection, meaning scans could have missed real findings before this update.

Read the original at PortSwigger Research ↗

Topics: Vulnerabilities & Patching
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026