All Vectors

Vector nameUser Created Type Likes
Chrome logo 1
Safari logo 1
Characters between < and element nameThomasOrlita4/15/2024HTML1
Safari logo 17
Chrome logo 1
URL scheme separator alternativessimoneonofri11/14/2024JS1
Chrome logo 29
Safari logo 29
Non-standard characters that break JSON.parse()DreyAnd11/15/2024JS1
Chrome logo 4
Firefox logo 4
Safari logo 4
Characters that act as new lines in multi line stringshackvertor6/20/2024JS1
Chrome logo 2
Safari logo 2
Firefox logo 2
ISO-2022-JP ASCII escape sequencehackvertor12/11/2024XSS1
Firefox logo 30
Chrome logo 30
Characters allowed after equals sign for eventYouGina12/17/2024XSS1
Chrome logo 2
Bytes that will normalize ISO-2022-JPCillian-Collins12/26/2024XSS1
Chrome logo 2
Bytes that will scramble ISO-2022-JPCillian-Collins12/26/2024XSS1
Chrome logo 82
encodeURI() not encoded with %forglockenspielexact7/11/2025JS1
Safari logo 34
Chrome logo 34
Firefox logo 35
HTML elements that parse differently when renderedhackvertor4/19/2024XSS1
Safari logo 31
Chrome logo 31
Firefox logo 31
Characters allowed after malformed entitieshackvertor7/1/2024XSS1
Firefox logo 34
Safari logo 34
Chrome logo 34
Characters allowed before slashes which result in an external URLhackvertor1/16/2025XSS1
Firefox logo 577
Safari logo 577
Chrome logo 577
Entities allowed as JS variableshackvertor7/2/2024XSS1
Chrome logo 63.4k
Firefox logo 63.4k
Safari logo 63.4k
Characters encoded by encodeURIComponent()JorianWoltjer7/4/2025JS1
Firefox logo 1
Safari logo 1
Chrome logo 1
Injection in src attribute PORT, characters that change hostnamereindaelman6/15/2025JS1
Safari logo 175
Firefox logo 175
Chrome logo 175
Unicode characters with a decomposition of 2+ ASCII characters and are registerable domains0x999-x5/7/2025XSS1
Chrome logo 273
Firefox logo 29
Safari logo 29
Characters allowed within a hostname but don't change the hostnameThomasOrlita4/30/2024JS1
Chrome logo 1
Characters that can break out of an inline style background-image url0xdef1ant7/13/2024XSS1
Chrome logo 6
Firefox logo 6
ToUpperCase Improper Character MorphingIDKdir7/13/2024JS1
JavaScript Scheme starting with httpBinaryScary7/16/2024JS1

Found 228 records

Page 10 of 12