All VectorsVector nameUser Created Type Likes 2 2HTML tags that can clobber the credentials part of the URL0x999-x11/4/2024XSS1 4 4 4Entities that cause an external URL before @hackvertor9/25/2024XSS4 5 5 5Characters allowed as a class separatorhackvertor4/13/2024XSS0 25 25 25Characters allowed in-between operatorshackvertor4/14/2024JS2 75 75 74Characters not urlencoded when using the credentials part of the URLhackvertor5/28/2024JS1 965 1.1k 1.1k 890Window propertieshackvertor5/31/2024JS0 292 271 267document propertieshackvertor5/31/2024JS0 5 5 5Properties that contain URLshackvertor5/31/2024JS2 25 25Characters allowed between variable name and equals sign0x999-x4/9/2024JS0 26 26 26Characters allowed between an object and the dot operatorcold-try4/15/2024JS0 119 118 115All events on windowhackvertor5/31/2024JS1 116 79 123All properties on navigator (two levels of nesting deep)freddyb6/6/2024JS0 39 39 39Characters allowed between an object and bracket notationcold-try4/15/2024JS0 1 1 1Properties that leak the parent URL even when sandboxedhackvertor6/6/2024JS0 13 13 13Properties are accessible in a sandboxed iframehackvertor6/7/2024JS0 3 3 3Characters allowed javascript and colonrenniepak4/9/2024JS3 102 102 102Characters that change length on .toUpperCase()ThomasOrlita4/15/2024JS0 1 1 1Properties that are accessible on locationhackvertor6/7/2024JS0 3 1 3Characters allowed at IPv6 but don't change the hostnamed0ge6/10/2024JS1 33 33 33Characters allowed before javascript URLThomasOrlita4/15/2024JS0Found 239 recordsPage 6 of 12«12345678910»
