All VectorsVector nameUser Created Type Likes 2 2 2 2HTML entities inside JavaScript URLhackvertor6/25/2024JS0 3 3 3 3HTML entities inside JavaScript URL before colonhackvertor6/25/2024JS0 50 50 50 50HTML entities that create ASCII characters inside a JavaScript URLhackvertor6/25/2024JS4 19 19 19HTML tags and attributes that can be used to access the URL0x999-x11/4/2024XSS1 2 2 2 2HTML tags that can clobber the credentials part of the URL0x999-x11/4/2024XSS1⚠Browser differences 39 1 39 39HTML tags that force HTML mode inside SVGhackvertor8/2/2024XSS1 1HTML vector nu11secur1ty9/29/2024HTML0 1 1 1HTML-Encoded Attribute EscapeIDKdir7/13/2024XSS0 1 1 1HostIDKdir7/15/2024JS0 2 2 2 2ISO-2022-JP ASCII escape sequencehackvertor12/11/2024XSS1 1 1 1Impossible lab framesetrenniepak11/27/2024HTML0 1 1 1Includes Validation Chars AllowedSimpsonpt10/8/2024JS1 1 1 1 1Injection in src attribute PORT, characters that change hostnamereindaelman6/15/2025JS1⚠Browser differences 2 1 2JIS X 0208 bytes that produce ASCII charactersJorianWoltjer9/22/2024JS1 40 40 40 40JavaScript Scheme starting with httpBinaryScary7/16/2024JS1 1 1 1 1JavaScript Scheme starting with https://BinaryScary6/28/2024JS4 16 16 16 16JavaScript separators between function namesInsertScript4/2/2024JS0 2 2 2 2List of HTML elements that convert to arbitrary stringjoaxcar4/10/2024XSS0 25 25 25Loose comparison, characters appended which still result in type coercionhansmach1ne1/6/2025JS1 2 2 2 2Malformed HTML commentshackvertor1/17/2025XSS0Found 256 recordsPage 10 of 13«45678910111213»
