All categories
Browser Quirks
CSS Parsing
Character Encoding
DOM Behavior
Entity Parsing
HTML Parsing
JavaScript Syntax
Regular Expressions
URL Handling
Web APIs
XML Parsing
XSS Execution
Login
Home
Vectors
Categories
All vectors
All collections
Browser diffs
RSS
Stats
Performance
Features
Differences
Network
Tools
Cheat sheet
Unicode table
Blog
Blog home
RSS
Help
Home
Vectors
Categories
All vectors
All collections
Browser diffs
RSS
Stats
Performance
Features
Differences
Network
Tools
Cheat sheet
Unicode table
Blog
Blog home
RSS
Help
Rebinding...
disconnected
Distributed Fuzzing
Enabled:
Status:
disconnected
Your browser automatically contributes to distributed fuzzing when idle.
All Vectors
Vector name
User
Created
Type
Likes
1
1
1
1
Characters cause self closing tag
hackvertor
7/23/2025
XSS
0
⚠ Browser differences
2
2
2
1
Characters ignored following slash in self closing tag
hackvertor
7/23/2025
XSS
1
⚠ Browser differences
67
65
67
67
Characters allowed inside javascript protocol and still returns the hostname
RenwaX23
7/21/2025
JS
3
⚠ Browser differences
25
25
25
1
Characters allowed after a bigint
hackvertor
7/18/2025
JS
0
⚠ Browser differences
31
31
31
1
Characters allowed either side of a variable assignment
hackvertor
7/18/2025
JS
0
25
25
25
25
Characters allowed after throw statement
hackvertor
7/14/2025
JS
0
82
82
82
82
encodeURI() not encoded with %
forglockenspielexact
7/11/2025
JS
1
⚠ Browser differences
1.1M
65.4k
1.1M
1
Characters encoded by escape()
JorianWoltjer
7/4/2025
JS
1
⚠ Browser differences
1.1M
63.4k
1.1M
1
Characters encoded by encodeURI()
JorianWoltjer
7/4/2025
JS
1
⚠ Browser differences
1.1M
63.4k
1.1M
1
Characters encoded by encodeURIComponent()
JorianWoltjer
7/4/2025
JS
1
1
1
1
1
Characters before custom tag
s3np41k1r1t0
6/23/2025
XSS
0
1
1
1
1
Injection in src attribute PORT, characters that change hostname
reindaelman
6/15/2025
JS
1
1
1
1
1
Characters appended at the end of PORT within URL, which yield a different HOST
reindaelman
6/15/2025
JS
0
⚠ Browser differences
1.1M
65.4k
1.1M
1
Characters allowed as a tag name using DOM APIs
hackvertor
6/13/2025
JS
0
⚠ Browser differences
300
48
300
1
Characters allowed before host name that are ignored
hackvertor
6/11/2025
XSS
0
⚠ Browser differences
1
1
1
280
Url parsing diff b/w anchor.href and new URL
Sudistark
5/26/2025
JS
0
300
300
300
300
Scheme slash alternatives in URL() when a base is used
N25sec
5/22/2025
JS
0
5
5
5
5
Characters that end unencapsulated HTML attribute values
ola456
5/14/2025
XSS
0
⚠ Browser differences
187
187
187
1
Unicode characters with a decomposition of 2+ ASCII characters and are registerable domains
0x999-x
5/7/2025
XSS
1
⚠ Browser differences
68
68
68
1
Characters allowed in the protocol that still resolve host name
hackvertor
5/6/2025
JS
0
Found
283
records
Page 4 of 15
«
1
2
3
4
5
6
7
8
9
10
»