Professional 1.5.16

Summary: PortSwigger released Burp Suite Professional 1.5.16 on Thursday, 5 September 2013, fixing two bugs introduced in v1.5.15. One bug caused some request headers to be lost when certain edits were made to request parameters, and the other produced broken relative links in in-browser error messages returned for requests to an external domain.
Key Takeaway: A header-dropping bug in a request-editing tool can silently change what a tester sends, so anyone relying on v1.5.15 results should treat those findings with suspicion until re-run on 1.5.16.

Read the original at PortSwigger Research ↗

Topics: Vulnerabilities & Patching
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026