All Vectors

Hoisting...

	Vector name	User	Created	Type	Likes
1.1M 1.1M 1.1M 1.1M	Characters encoded by encodeURI()	JorianWoltjer	7/4/2025	JS	1
1.1M 1.1M 1.1M 1.1M	Characters encoded by encodeURIComponent()	JorianWoltjer	7/4/2025	JS	1
1 1 1 1	Characters before custom tag	s3np41k1r1t0	6/23/2025	XSS	0
1 1 1 1	Injection in src attribute PORT, characters that change hostname	reindaelman	6/15/2025	JS	1
1 1 1 1	Characters appended at the end of PORT within URL, which yield a different HOST	reindaelman	6/15/2025	JS	0
⚠ Browser differences 1.1M 1.1M 1.1M 971.5k	Characters allowed as a tag name using DOM APIs	hackvertor	6/13/2025	JS	0
300 300 300 300	Characters allowed before host name that are ignored	hackvertor	6/11/2025	XSS	0
⚠ Browser differences 1 1 1 280	Url parsing diff b/w anchor.href and new URL	Sudistark	5/26/2025	JS	0
300 300 300 300	Scheme slash alternatives in URL() when a base is used	N25sec	5/22/2025	JS	0
5 5 5 5	Characters that end unencapsulated HTML attribute values	ola456	5/14/2025	XSS	0
⚠ Browser differences 187 187 187 175	Unicode characters with a decomposition of 2+ ASCII characters and are registerable domains	0x999-x	5/7/2025	XSS	1
68 68 68 68	Characters allowed in the protocol that still resolve host name	hackvertor	5/6/2025	JS	0
1 1 1	Chars that can be used as opening bracket in innerHTML	nollium	4/19/2025	JS	1
33 33 33 33	Fuzzing for Max sanitized input (simplified)	vitorfhc	4/7/2025	XSS	0
1 1 1	CSS inline property definition	hipotermia	3/12/2025	HTML	0
1 1 1	Characters that starts element name	lUcgryy	3/10/2025	HTML	0
1 1 1	Escape inline double quote	lUcgryy	3/7/2025	XSS	0
4 4 4 4	Characters allowed before the JavaScript protocol colon	RemakingEden	3/3/2025	XSS	0
5 5 5	Chars allowed between src and = in img tag	rootd4ddy	3/2/2025	XSS	0
298 298 298 298	Characters Allowed Between Protocol // and localhost Where Host Still Equals localhost	rootd4ddy	3/2/2025	JS	0

Found 314 records

Page 6 of 16

1 2 3 4 5 6 7 8 9 10

All Vectors

Distributed Fuzzing

All Vectors