All Vectors

Smuggling...

	Vector name	User	Created	Type	Likes
⚠ Browser differences 34 1 2	JIS X 0208 bytes that produce ASCII characters	JorianWoltjer	9/22/2024	JS	1
1 1 1 1	Characters between < and element name	ThomasOrlita	4/15/2024	HTML	1
577 577 577 577	Entities allowed as JS variables	hackvertor	7/2/2024	XSS	1
6 6 6	ToUpperCase Improper Character Morphing	IDKdir	7/13/2024	JS	1
40 40 40 40	JavaScript Scheme starting with http	BinaryScary	7/16/2024	JS	1
9 9 9	XSS vectors that consume tag	Y4tacker	11/5/2024	XSS	1
⚠ Browser differences 39 1 39 39	HTML tags that force HTML mode inside SVG	hackvertor	8/2/2024	XSS	1
7 7 7 7	Characters that close or encapsulate HTML attribute values	ola456	11/5/2024	XSS	1
1.1M 63.3k 63.3k 63.3k	Differences between escape vs encodeURIComponent	hackvertor	10/15/2024	JS	1
2 2 2 2	HTML tags that can clobber the credentials part of the URL	0x999-x	11/4/2024	XSS	1
2 2 2	Bytes that will normalize ISO-2022-JP	Cillian-Collins	12/26/2024	XSS	1
2 2 2	Bytes that will scramble ISO-2022-JP	Cillian-Collins	12/26/2024	XSS	1
89 89 89 89	Characters unencoded characters supported in the hash	hackvertor	9/24/2024	JS	1
34 34 34 34	Characters allowed before slashes which result in an external URL	hackvertor	1/16/2025	XSS	1
29 29 29 29	Non-standard characters that break JSON.parse()	DreyAnd	11/15/2024	JS	1
1 1 1 1	masato - braves parsing finding entity test	InsertScript	8/3/2025	XSS	1
1 1 1 1	masato - braves parsing finding valid attributes	InsertScript	8/3/2025	XSS	1
⚠ Browser differences 297 45 45 29	Characters allowed within a hostname but don't change the hostname	ThomasOrlita	4/30/2024	JS	1
1 1 1	Includes Validation Chars Allowed	Simpsonpt	10/8/2024	JS	1
1 1 1	Entities in-between square brackets that close cdata	hackvertor	10/8/2024	XSS	1

Found 272 records

Page 11 of 14

5 6 7 8 9 10 11 12 13 14

All Vectors

Distributed Fuzzing

All Vectors