All Vectors

Crashing...

	Vector name	User	Created	Type	Likes
1 1 1	HTML-Encoded Attribute Escape	IDKdir	7/13/2024	XSS	0
⚠ Browser differences 300 48 300 48	Characters allowed before host name that are ignored	hackvertor	6/11/2025	XSS	0
1 1 1	Characters that can break out of an inline style with double quotes	0xdef1ant	7/13/2024	XSS	0
1 1 1	Characters that can break out of an inline style with single quotes	0xdef1ant	7/13/2024	XSS	0
1 1 1 1	Characters before custom tag	s3np41k1r1t0	6/23/2025	XSS	0
6 6 6 6	Characters allowed between HTML attributes	0x999-x	4/10/2024	XSS	0
⚠ Browser differences 10 9 10 9	Attributes that are also DOM properties	hackvertor	4/30/2024	XSS	0
1 1 1	Characters that can break out of an inline style background-image url	0xdef1ant	7/13/2024	XSS	1
14 14 14	Active formatting elements	JorianWoltjer	5/1/2024	XSS	0
1.1k 1.1k 1.1k	Mutated XSS Attributes	IDKdir	7/13/2024	XSS	0
5 5 5 5	Character allowed after onerror event	InsertScript	4/2/2024	XSS	0
2 2 2 2	Characters ignored following slash in self closing tag	hackvertor	7/23/2025	XSS	1
32 32 32 32	Characters that can precede the javascript protocol copy	rcbarnett	5/2/2024	XSS	0
5 5 5 5	Characters allowed before CSS selectors	hackvertor	7/15/2024	XSS	0
1 1 1 1	Characters cause self closing tag	hackvertor	7/23/2025	XSS	0
106 106 106 106	Named HTML entities that can be closed with !	avlidienbrunn	7/29/2025	XSS	2
1 1 1 1	masato - braves parsing finding	InsertScript	8/3/2025	XSS	1
1 1 1 1	masato - braves parsing finding valid attributes	InsertScript	8/3/2025	XSS	1
1 1 1 1	masato - braves parsing finding valid characters	InsertScript	8/3/2025	XSS	1
1 1 1 1	masato - braves parsing finding entity test	InsertScript	8/3/2025	XSS	1

Found 283 records

Page 13 of 15

6 7 8 9 10 11 12 13 14 15

All Vectors

Distributed Fuzzing

All Vectors