All Vectors

Splicing...

	Vector name	User	Created	Type	Likes
39 39 39 39	Characters allowed between an object and bracket notation	cold-try	4/15/2024	JS	0
50 50 50 50	HTML entities that create ASCII characters inside a JavaScript URL	hackvertor	6/25/2024	JS	4
1 1 1	Bypasses for __proto__ string match	vitorfhc	8/29/2024	JS	0
25 25 25 25	Characters allowed in-between operators	hackvertor	4/14/2024	JS	2
⚠ Browser differences 3 1 3 1	Characters allowed at IPv6 but don't change the hostname	d0ge	6/10/2024	JS	1
⚠ Browser differences 1.1M 65.4k 1.1M 1.1M	Characters matching URLPattern capture group	JorianWoltjer	4/6/2026	JS	0
35 35 35 35	Entities still parsed in uppercase	hackvertor	7/2/2024	JS	0
65 65 65 65	Characters matching RegEx /\w/ui	JorianWoltjer	12/5/2025	JS	1
25 25 25 25	Characters allowed after optional chaining	hackvertor	5/4/2024	JS	2
1.5k 1.5k 1.5k 1.5k	Unicode "Latin" characters using \p{scx=Latin} RegEx	JorianWoltjer	12/5/2025	JS	0
⚠ Browser differences 3 3 3 1	Characters allowed javascript and colon	renniepak	4/9/2024	JS	4
25 25 25 25	characters between function name and parentheses	InsertScript	11/3/2025	JS	0
300 300 300 300	Characters ignored after colon in URL constructor	hackvertor	6/15/2026	JS	0
⚠ Browser differences 1 1 312 314	Characters allowed at hostname	d0ge	6/11/2024	JS	1
40 40 40 40	JavaScript Scheme starting with http	BinaryScary	7/16/2024	JS	1
25 25 25 25	Characters ignored in strings when doing a non strict comparison	hackvertor	6/18/2024	JS	0
1 1 1 1	URL hash alternatives	hackvertor	6/16/2026	JS	0
1 1 1 1	URL question mark alternatives	hackvertor	6/16/2026	JS	0
1 1 1 1	Injection in src attribute PORT, characters that change hostname	reindaelman	6/15/2025	JS	1
1 1 1	Characters prepended to URL host. check if difference between URL and a tag	InsertScript	1/10/2025	JS	0

Found 302 records

Page 8 of 16

3 4 5 6 7 8 9 10 11 12

All Vectors

Distributed Fuzzing

All Vectors