Exposure DB
1,048 exposure sites - every place a customer-controlled credential or secret can leak - each mapped to the edge it emits, its collection recipe, and what leaks.
406
aws
377
azure
265
gcp
563
critical severity
250
medium severity
233
high severity
2
low severity
GetArchiveRule.archiveRule.filter.<criterion>.contains / eq / neq - leaks credential, sensitive_data, pii
ListTagsForResource.tags.<value> - leaks credential, sensitive_data
GetAlternateContact.AlternateContact - leaks pii, sensitive_data
GetContactInformation.ContactInformation - leaks pii, sensitive_data
GetPrimaryEmail.PrimaryEmail - leaks pii, sensitive_data
DescribeCertificate.Certificate.DomainName / Subject / SubjectAlternativeNames - leaks pii, sensitive_data
ListTagsForCertificate.Tags[].Value - leaks credential, sensitive_data
ListTags.Tags[].Value - leaks credential, sensitive_data
GetCertificateAuthorityCsr.Csr - leaks certificate, pii, sensitive_data
GetCertificate.Certificate / CertificateChain - leaks certificate, pii, sensitive_data
GetApp.app.tags.<value> - leaks credential, sensitive_data
CloudWatch Logs API Gateway execution/access log event.message - leaks credential, api_key, bearer_token, session_token, password, pii, sensitive_data
GetTags.tags.<value> - leaks credential, sensitive_data
DescribeFlow.sourceFlowConfig.connectorProfileName / sourceConnectorProperties / destinationFlowConfigList[].destinationConnectorProperties / tasks[].taskProperties - leaks credential, connection_string, sensitive_data, pii
ListTagsForResource.tags.<value> - leaks credential, sensitive_data
ListTagsForResource.tags[].value - leaks credential, sensitive_data
DescribeRoute.route.spec.httpRoute.match.headers[].match.{exact,prefix,regex,suffix} - leaks credential, api_key, bearer_token, sensitive_data
ListTagsForResource.Tags[].Value - leaks credential, sensitive_data
GetNamedQuery.NamedQuery.QueryString - leaks credential, password, api_key, sensitive_data
GetPreparedStatement.PreparedStatement.QueryStatement - leaks credential, password, api_key, sensitive_data
GetQueryExecution.QueryExecution.Query - leaks credential, password, api_key, sensitive_data, pii
ListTagsForResource.Tags[].Value - leaks credential, sensitive_data
DescribeAutoScalingGroups.AutoScalingGroups[].Tags[].Value - leaks credential, sensitive_data
ListTags.Tags.<value> - leaks credential, sensitive_data
GetRecoveryPointRestoreMetadata.RestoreMetadata.<value> - leaks credential, password, connection_string, sensitive_data
GetBackupVaultAccessPolicy.Policy - leaks credential, sensitive_data
ListTagsForResource.tags.<value> - leaks credential, sensitive_data
ListTagsForResource.Tags[].Value - leaks credential, sensitive_data
Configured S3/CloudWatch Bedrock model invocation log record - leaks credential, password, api_key, customer_data, pii, source_code_secret, sensitive_data
ListTagsForResource.tags[].value - leaks credential, sensitive_data
DescribeStackEvents.StackEvents[].ResourceStatusReason - leaks credential, password, api_key, sensitive_data
DescribeStacks.Stacks[].Tags[].Value - leaks credential, sensitive_data
S3 CloudFront standard or real-time log record - leaks credential, api_key, bearer_token, session_token, pii, sensitive_data
ListTagsForResource.Tags.Items[].Value - leaks credential, sensitive_data
ListTags.TagList[].Value - leaks credential, sensitive_data
StartQuery request.QueryStatement - leaks credential, password, api_key, sensitive_data
ListTags.ResourceTagList[].TagsList[].Value - leaks credential, sensitive_data
DescribeAlarms.MetricAlarms[].AlarmDescription / CompositeAlarms[].AlarmDescription - leaks credential, sensitive_data, pii
logs:ListTagsForResource.tags.<value> - leaks credential, sensitive_data
logs:DescribeQueries.queries[].queryString - leaks credential, password, api_key, sensitive_data
ListMetrics.Metrics[].Dimensions[].Value - leaks credential, sensitive_data, pii
ListTagsForResource.tags[].value - leaks credential, sensitive_data
ListProjects + BatchGetProjects.projects[].tags[].value - leaks credential, sensitive_data
GetCommit.commit.message - leaks credential, password, api_key, sensitive_data
GetCommentsForPullRequest.commentsForPullRequestData[].comments[].content - leaks credential, password, api_key, sensitive_data, pii
ListTagsForResource.tags.<value> - leaks credential, sensitive_data
ListTagsForResource.Tags[].Value - leaks credential, sensitive_data
ListActionExecutions.actionExecutionDetails[].output.executionResult.externalExecutionSummary - leaks credential, password, api_key, sensitive_data
ListTagsForResource.tags[].value - leaks credential, sensitive_data
ListUsers.Users[].Attributes[].Value - leaks pii, sensitive_data, credential