Professional 1.5.18
Summary: PortSwigger released Burp Suite Professional 1.5.18 on Thursday, 7 November 2013, an update focused on the Scanner tool. The release added checks for new vulnerability types including remote file inclusion, recursive XML entity expansion, responses dependent on the X-Forwarded-For header, "long" redirection responses, and Base64-encoded data within request parameters, while enhancing existing checks to reduce false negatives and positives and fixing a number of bugs.
What's compelling: The scanner now flags issues like recursive XML entity expansion and X-Forwarded-For-dependent responses, categories that testing teams relying on older check sets would have missed entirely.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026