All Vectors

Enumerating...

	Vector name	User	Created	Type	Likes
5 5 5 5	Character allowed after onerror event	InsertScript	4/2/2024	XSS	0
1 1 1	Characters prepended to URL host. check if difference between URL and a tag	InsertScript	1/10/2025	JS	0
1 1 1	characters allowed between exclamation mark and greater then	InsertScript	6/18/2024	HTML	0
65.4k 65.4k 65.4k 65.4k	Characters encoded by escape()	JorianWoltjer	7/4/2025	JS	1
65.5k 65.5k 65.5k 65.5k	Characters allowed in middle of HTML tag name	JorianWoltjer	1/30/2026	XSS	1
63.4k 63.4k 63.4k 63.4k	Characters encoded by encodeURI()	JorianWoltjer	7/4/2025	JS	1
53 53 53 53	Characters allowed as start of HTML tag name	JorianWoltjer	1/30/2026	XSS	1
⚠ Browser differences 2 1 2	JIS X 0208 bytes that produce ASCII characters	JorianWoltjer	9/22/2024	JS	1
5 5 5	Characters allowed between multiple HTML attributes	JorianWoltjer	9/12/2024	XSS	4
4 4 4 4	URL domain dot alternatives	JorianWoltjer	9/10/2024	JS	5
63.4k 63.4k 63.4k 63.4k	Characters encoded by encodeURIComponent()	JorianWoltjer	7/4/2025	JS	1
14 14 14	Active formatting elements	JorianWoltjer	5/1/2024	XSS	0
1 1 1	Characters that change length on .toLowerCase()	JorianWoltjer	4/11/2024	JS	1
65.4k 65.4k 65.4k 65.4k	Characters matching URLPattern capture group	JorianWoltjer	4/6/2026	JS	0
⚠ Browser differences 1.4k 1.4k 1.4k 1.4k	Unicode "Latin" characters using \p{scx=Latin} RegEx	JorianWoltjer	12/5/2025	JS	0
65 65 65 65	Characters matching RegEx /\w/ui	JorianWoltjer	12/5/2025	JS	1
⚠ Browser differences 48 48 48 32	Scheme slash alternatives in URL() when a base is used	N25sec	5/22/2025	JS	0
1 1 1 1	dsqd	NikolaT3esla	10/1/2025	HTML	0
1 1 1 1	Electron XSS TEST	P4rkJW	10/22/2025	HTML	0
4 4 4 4	Characters allowed before the JavaScript protocol colon	RemakingEden	3/3/2025	XSS	0

Found 255 records

Page 3 of 13

1 2 3 4 5 6 7 8 9 10

All Vectors

Distributed Fuzzing

All Vectors