All VectorsVector nameUser Created Type Likes 2 2HTML tags that can clobber the credentials part of the URL0x999-x11/4/2024XSS1 29 29Non-standard characters that break JSON.parse()DreyAnd11/15/2024JS1 273 29 29Characters allowed within a hostname but don't change the hostnameThomasOrlita4/30/2024JS1 34 34 35HTML elements that parse differently when renderedhackvertor4/19/2024XSS1 119 118 115All events on windowhackvertor5/31/2024JS1 30 30Characters allowed after equals sign for eventYouGina12/17/2024XSS1 25Loose comparison, characters appended which still result in type coercionhansmach1ne1/6/2025JS1 20 19HTML tags and attributes that can be used to access the URL0x999-x11/4/2024XSS1 1Includes Validation Chars AllowedSimpsonpt10/8/2024JS1 8 8 8Consuming tagshackvertor4/8/2024HTML1 3 1 3Characters allowed at IPv6 but don't change the hostnamed0ge6/10/2024JS1Entities in-between square brackets that close cdatahackvertor10/8/2024XSS1 1 1 1Characters allowed in-between hyphenshackvertor4/14/2024XSS1 6 6ToUpperCase Improper Character MorphingIDKdir7/13/2024JS1 31 31 31Characters allowed after malformed entitieshackvertor7/1/2024XSS1 577 577 577Entities allowed as JS variableshackvertor7/2/2024XSS1 1Characters that change length on .toLowerCase()JorianWoltjer4/11/2024JS1 82encodeURI() not encoded with %forglockenspielexact7/11/2025JS1 65.4k 65.4k 65.4kCharacters encoded by escape()JorianWoltjer7/4/2025JS1 312 314 311Characters allowed at hostnamed0ge6/11/2024JS1Found 243 recordsPage 3 of 13«12345678910»
