All categories
Browser Quirks
CSS Parsing
Character Encoding
DOM Behavior
Entity Parsing
HTML Parsing
JavaScript Syntax
Regular Expressions
URL Handling
Web APIs
XML Parsing
XSS Execution
Login
Home
Vectors
Categories
All vectors
All collections
Browser diffs
RSS
Stats
Performance
Features
Differences
Releases
Network
Tools
Cheat sheet
Unicode table
Blog
Blog home
RSS
What's new
Help
Home
Vectors
Categories
All vectors
All collections
Browser diffs
RSS
Stats
Performance
Features
Differences
Releases
Network
Tools
Cheat sheet
Unicode table
Blog
Blog home
RSS
What's new
Help
Corpus-building...
disconnected
Distributed Fuzzing
Enabled:
Status:
disconnected
Open fuzz launcher
Your browser automatically contributes to distributed fuzzing when idle. The launcher keeps fuzzing going while you use other tabs.
Advanced
All categories
Browser Quirks
CSS Parsing
Character Encoding
DOM Behavior
Entity Parsing
HTML Parsing
JavaScript Syntax
Regular Expressions
URL Handling
Web APIs
XML Parsing
XSS Execution
All Vectors
Vector name
User
Created
Type
Likes
7
7
7
7
Closing title tag name separators
ola456
9/15/2025
XSS
0
2
2
2
2
List of HTML elements that convert to arbitrary string
joaxcar
4/10/2024
XSS
0
1
1
1
1
Characters allowed in between @import
bribes
10/19/2025
XSS
0
301
301
301
301
Characters ignored in hostname before port in URL constructor
hackvertor
6/15/2026
JS
0
⚠ Browser differences
51
1
51
1
Invalid selector characters with a prefix of x
hackvertor
8/6/2026
XSS
0
⚠ Browser differences
19
11
19
14
CSS Properties that make external requests
hackvertor
8/6/2026
XSS
0
1
1
1
1
chars before img tags
t0xodile
10/25/2025
XSS
0
⚠ Browser differences
43
33
43
42
CSS Properties and functions that make external requests
hackvertor
8/6/2026
XSS
0
14
14
14
Active formatting elements
JorianWoltjer
5/1/2024
XSS
0
4
4
4
4
Entities allowed before slashes on a protocol relative URL
hackvertor
7/6/2024
JS
0
25
25
25
25
characters between function name and parentheses
InsertScript
11/3/2025
JS
0
332
332
332
332
Characters ignored after hostname in URL constructor
hackvertor
6/15/2026
JS
0
A
30.0ms
B
44.8ms
A
15.0ms
B
95.0ms
A
8.4ms
B
32.3ms
A
23.0ms
B
109.0ms
for loop vs forEach
hackvertor
7/3/2026
PERF
0
300
300
300
300
Characters ignored after colon in URL constructor
hackvertor
6/15/2026
JS
0
1
1
1
1
mamad
amirjoudak
6/2/2026
JS
0
1.1M
1.1M
1.1M
1.1M
Characters allowed as CSS variable names
hackvertor
8/6/2026
XSS
0
1
1
1
1
XSS vectors that execute automatically inside math
hackvertor
4/17/2024
XSS
0
10
10
10
10
Entities that are normalized for e
hackvertor
7/12/2024
JS
0
⚠ Browser differences
74
75
74
75
Characters not urlencoded when using the credentials part of the URL
hackvertor
5/28/2024
JS
1
17
17
17
17
URL scheme separator alternatives
simoneonofri
11/14/2024
JS
1
Found
318
records
Page 12 of 16
«
7
8
9
10
11
12
13
14
15
16
»