All categories
Browser Quirks
CSS Parsing
Character Encoding
DOM Behavior
Entity Parsing
HTML Parsing
JavaScript Syntax
Regular Expressions
URL Handling
Web APIs
XML Parsing
XSS Execution
Login
Home
Vectors
Categories
All vectors
All collections
Browser diffs
RSS
Stats
Performance
Features
Differences
Releases
Network
Tools
Cheat sheet
Unicode table
Blog
Blog home
RSS
What's new
Help
Home
Vectors
Categories
All vectors
All collections
Browser diffs
RSS
Stats
Performance
Features
Differences
Releases
Network
Tools
Cheat sheet
Unicode table
Blog
Blog home
RSS
What's new
Help
Reflecting...
disconnected
Distributed Fuzzing
Enabled:
Status:
disconnected
Open fuzz launcher
Your browser automatically contributes to distributed fuzzing when idle. The launcher keeps fuzzing going while you use other tabs.
Advanced
All categories
Browser Quirks
CSS Parsing
Character Encoding
DOM Behavior
Entity Parsing
HTML Parsing
JavaScript Syntax
Regular Expressions
URL Handling
Web APIs
XML Parsing
XSS Execution
All Vectors
Vector name
User
Created
Type
Likes
2
2
2
char not urlencoded (data)
nu11secur1ty
9/29/2024
JS
0
5
5
5
5
Characters in-between protocol relative URLs in fetch()
hackvertor
9/11/2026
JS
0
298
298
298
298
Characters Allowed Between Protocol // and localhost Where Host Still Equals localhost
rootd4ddy
3/2/2025
JS
0
1
1
1
Url parsing diff b/w window.open and new URL
Sudistark
2/21/2025
JS
0
5
5
5
5
Characters allowed in between // in absolute URL
bribes
11/29/2025
JS
0
297
297
297
297
Characters allowed within a hostname but don't change the hostname
ThomasOrlita
4/30/2024
JS
1
10
10
10
10
Entities that are normalized for e
hackvertor
7/12/2024
JS
0
A
9.8ms
B
12.3ms
A
9.0ms
B
7.0ms
A
5.8ms
B
8.8ms
A
20.0ms
B
28.0ms
String concat vs array join
hackvertor
7/4/2026
PERF
0
A
42.4ms
B
41.5ms
A
6.0ms
B
6.0ms
A
6.6ms
B
6.8ms
A
9.0ms
B
10.0ms
indexOf vs includes
hackvertor
7/4/2026
PERF
0
29.0ms
1.0ms
10.7ms
66.0ms
startsWith performance
hackvertor
7/4/2026
PERF
0
A
37.6ms
B
51.0ms
A
7.0ms
B
31.0ms
A
20.9ms
B
31.0ms
A
47.0ms
B
16.0ms
startsWith vs regex
hackvertor
7/3/2026
PERF
0
A
30.0ms
B
44.8ms
A
15.0ms
B
95.0ms
A
8.4ms
B
32.3ms
A
23.0ms
B
109.0ms
for loop vs forEach
hackvertor
7/3/2026
PERF
0
⚠ Browser differences
998
998
996
950
Window properties
hackvertor
5/31/2024
SINGLE
0
13
13
13
13
Properties are accessible in a sandboxed iframe
hackvertor
6/7/2024
SINGLE
0
1
1
1
1
Properties that are accessible on location
hackvertor
6/7/2024
SINGLE
0
⚠ Browser differences
297
282
298
276
document properties
hackvertor
5/31/2024
SINGLE
0
1
1
1
1
Properties that contain URLs
hackvertor
5/31/2024
SINGLE
2
⚠ Browser differences
96
126
92
71
All properties on navigator (two levels of nesting deep)
freddyb
6/6/2024
SINGLE
0
1
1
1
1
Properties that leak the parent URL even when sandboxed
hackvertor
6/6/2024
SINGLE
0
⚠ Browser differences
121
122
121
120
All events on window
hackvertor
5/31/2024
SINGLE
1
Found
318
records
Page 9 of 16
«
4
5
6
7
8
9
10
11
12
13
»
