Curated security research, vulnerabilities, advisories and tools for practitioners.

#scanner

Security coverage tagged scanner.

1.

Fortinet FortiWeb Authentication Bypass – CVE-2025-64446

vulnerability | Critical | Actively exploited | 2025-11-19 00:00 | CVE-2025-64446 | bishopfox.com | Original ↗ | .md | #active-exploitation | #vulnerability-research | #authentication-bypass

2.

Vulnerability Prioritization: Severity Does Not Mean Priority

vulnerability | 2023-11-14 17:27 | hackerone.com | Original ↗ | .md | #bug-bounty | #appsec | #vulnerability-management

3.

Backslash Powered Scanning: hunting unknown vulnerability classes

vulnerability | 2022-08-16 09:25 | portswigger.net | Original ↗ | .md | #burp-suite | #vulnerability-research | #fuzzing

4.

Burp 2.0: Where are the Spider and Scanner?

tool | 2018-10-01 14:00 | portswigger.net | Original ↗ | .md | #burp-2-0 | #how-to | #tasks

5.

Launching scans

blog | 2018-08-17 16:08 | portswigger.net | Original ↗ | .md | #burp-suite | #configuration | #portswigger

6.

The new configuration library

blog | 2018-08-16 15:35 | portswigger.net | Original ↗ | .md | #burp-suite | #portswigger | #scanner

7.

Improved management of system resources

blog | 2018-08-15 15:37 | portswigger.net | Original ↗ | .md | #burp-suite | #performance | #scanner

8.

Multiple parallel scans

blog | 2018-08-14 15:57 | portswigger.net | Original ↗ | .md | #burp-suite | #portswigger | #spider

9.

Dynamic analysis of JavaScript

blog | 2018-08-13 15:47 | portswigger.net | Original ↗ | .md | #burp-suite | #dom-xss | #javascript

10.

Handling application errors during scans

blog | 2018-08-12 15:37 | portswigger.net | Original ↗ | .md | #burp-suite | #resilience | #scanner

11.

Frequently occurring insertion points

blog | 2018-08-11 15:53 | portswigger.net | Original ↗ | .md | #burp-suite | #scanner | #mobp

12.

Consolidation of site-wide passive issues

blog | 2018-08-10 16:13 | portswigger.net | Original ↗ | .md | #burp-suite | #passive-scanning | #scanner

13.

Improved detection of stored input

blog | 2018-08-09 16:29 | portswigger.net | Original ↗ | .md | #burp-suite | #sql-injection | #xss

14.

Multi-phase scanning

blog | 2018-08-08 16:14 | portswigger.net | Original ↗ | .md | #burp-suite | #ui | #audit

15.

Automatically maintaining session during scans

blog | 2018-08-07 16:18 | portswigger.net | Original ↗ | .md | #burp-suite | #automation | #session-handling

16.

Bug Bounty Myth #5: They don’t yield high value results.

blog | 2018-06-01 00:00 | bugcrowd.com | Original ↗ | .md | #bug-bounty | #bugcrowd | #owasp

17.

Burp Suite now reports blind XXE injection

blog | 2015-05-06 14:33 | portswigger.net | Original ↗ | .md | #burp-suite | #collaborator | #scanner

18.

Burp gets new JavaScript analysis capabilities

blog | 2014-07-28 15:43 | portswigger.net | Original ↗ | .md | #burp-suite | #dom-xss | #javascript

19.

Sample Burp Suite extension: custom scanner checks

tool | 2012-12-20 15:04 | portswigger.net | Original ↗ | .md | #burp-suite | #extensions | #scanner

20.

Sample Burp Suite extension: custom scan insertion points

blog | 2012-12-18 15:20 | portswigger.net | Original ↗ | .md | #burp-suite | #serialization | #extensions