All VectorsVector nameUser Created Type Likes 2 2 2 2Characters that act as attribute quotes copyfreddyb5/31/2024XSS0 82 82 82 82encodeURI() not encoded with %forglockenspielexact7/11/2025JS1 1 1 1Valid characters between function and dot-parenthesis .()felipecaon5/6/2024JS0 25 25 25Valid characters between function and parenthesisfelipecaon5/6/2024JS0 1 1 1Characters allowed between < and element felipecaon5/6/2024HTML0⚠Browser differences 50.7k 50.7k 50.7k 50.7kFind WAF bypass for eval contextelieehel11/22/2024JS0 1 1 1Quotesdogspyagent7/13/2024XSS0 2 2 2 2Characters not urlencoded when using the shema part of the URLd0ge9/24/2024JS0⚠Browser differences 3 1 3 1Characters allowed at IPv6 but don't change the hostnamed0ge6/10/2024JS1⚠Browser differences 312 312 312 314Characters allowed at hostnamed0ge6/11/2024JS1 26 26 26 26Characters allowed between an object and the dot operatorcold-try4/15/2024JS0 39 39 39 39Characters allowed between an object and bracket notationcold-try4/15/2024JS0 3 3 3 3Characters that can be inserted in the middle of the JS protocol namecold-try4/15/2024XSS0 1 1 1Characters allowed instead of equal signc3l3si4n4/28/2024XSS0⚠Browser differences 5 5 5 1Characters allowed in between // in absolute URLbribes11/29/2025JS0 1 1 1 1Characters allowed in between @importbribes10/19/2025XSS0 4 4 4 4Characters allowed javascript and colon copy2avlidienbrunn9/29/2024JS0 106 106 106 106Named HTML entities that can be closed with !avlidienbrunn7/29/2025XSS2⚠Browser differences 48 48 48 32Valid characters before domain 1avlidienbrunn4/10/2024XSS0 1 1 1 1mamadamirjoudak6/2/2026JS0Found 256 recordsPage 9 of 13«45678910111213»
