Exposure DB
1,048 exposure sites - every place a customer-controlled credential or secret can leak - each mapped to the edge it emits, its collection recipe, and what leaks.
406
aws
377
azure
265
gcp
563
critical severity
250
medium severity
233
high severity
2
low severity
cloudkms.projects.locations.keyRings.cryptoKeys.decrypt.plaintext - leaks credential, encryption_key_material, sensitive_data
cloudkms.projects.locations.keyRings.cryptoKeys.cryptoKeyVersions.rawDecrypt.plaintext - leaks credential, encryption_key_material, sensitive_data
logging.entries.list.entries[].{textPayload,jsonPayload,protoPayload} - leaks credential, password, api_key, oauth_token, customer_data, pii, sensitive_data
Redis GET/MGET/SCAN.key names and values - leaks credential, customer_data, pii, sensitive_data
monitoring.projects.timeSeries.list.timeSeries[].{points[],metric.labels.<value>,resource.labels.<value>} - leaks customer_data, pii, sensitive_data
Compute Engine disk attachment or snapshot export.mounted filesystem bytes - leaks credential, private_key, source_code_secret, customer_data, pii
pubsub.projects.subscriptions.pull.receivedMessages[].message.data - leaks credential, customer_data, pii, sensitive_data
securitycenter.organizations.sources.findings.list.listFindingsResults[].finding.{sourceProperties,securityMarks.marks,connections[],contacts,compliances[]} - leaks credential, customer_data, pii, sensitive_data
Git upload-pack/archive.commits, trees, blobs, and file bytes - leaks source_code_secret, credential, private_key, password, api_key
spanner.projects.instances.databases.sessions.read.rows[] - leaks credential, customer_data, pii, sensitive_data
spanner.projects.instances.databases.sessions.executeSql.rows[] - leaks credential, customer_data, pii, sensitive_data
cloudtasks.projects.locations.queues.tasks.get.appEngineHttpRequest.{body,headers.<value>,relativeUri} - leaks credential, customer_data, pii, sensitive_data
cloudtasks.projects.locations.queues.tasks.get.httpRequest.body - leaks credential, customer_data, pii, sensitive_data
Jupyter contents API / mounted filesystem read.notebook cells, outputs, and files - leaks source_code_secret, credential, private_key, customer_data, pii
VPC Packet Mirroring collector capture.mirrored packet payloads - leaks credential, oauth_token, customer_data, pii, sensitive_data
workflowexecutions.projects.locations.workflows.executions.get.{argument,result,error.payload} - leaks credential, customer_data, pii, sensitive_data