Professional 1.2.10

Summary: PortSwigger released Burp Suite Professional 1.2.10 on 29 May 2009, adding a workaround for a JRE bug that causes a "bad record mac" error in the SSL handshake when a server implements a certain combination of SSL protocols. The release also fixes a bug introduced in v1.2.09 that prevented saving state from the UI, and adds a startup and state-restoration alert when live active scanning is enabled.
What you should know: The new alert exists to reduce the likelihood of inadvertently attacking websites added to the target scope during previous work - a reminder that a scanner left in live active mode can carry yesterday's scope into today's engagement.

Read the original at PortSwigger Research ↗

Topics: Vulnerabilities & Patching
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026