All VectorsVector nameUser Created Type Likes 25 25 25Valid space characters in a regexhackvertor12/9/2025JS0 965 1.1k 1.1k 890Window propertieshackvertor5/31/2024JS0 9 9XSS vectors that consume tagY4tacker11/5/2024XSS1 5 5 7XSS vectors that execute automatically hackvertor4/17/2024XSS0 1 1XSS vectors that execute automatically inside mathhackvertor4/17/2024XSS0 1 1XSS vectors that execute automatically inside svghackvertor4/17/2024XSS0 2char not urlencoded (data)nu11secur1ty9/29/2024JS0 141char not urlencoded (data+)nu11secur1ty9/29/2024JS0 2 2 2characters after slash that make a http protocolInsertScript4/3/2024XSS0 1characters allowed between exclamation mark and greater then InsertScript6/18/2024HTML0 25 25 25characters between function name and parenthesesInsertScript11/3/2025JS0 1 1chars before img tagst0xodile10/25/2025XSS0 292 271 267document propertieshackvertor5/31/2024JS0 65.5kdomain valuesnu11secur1ty9/29/2024JS0dsqdNikolaT3esla10/1/2025HTML0 82encodeURI() not encoded with %forglockenspielexact7/11/2025JS1framers event executorsweizman4/10/2024XSS0 16 16masato - braves parsing findingInsertScript8/3/2025XSS1 3 3masato - braves parsing finding entity testInsertScript8/3/2025XSS1 195 195masato - braves parsing finding valid attributesInsertScript8/3/2025XSS1Found 243 recordsPage 12 of 13«45678910111213»