Exposure DB
1,048 exposure sites - every place a customer-controlled credential or secret can leak - each mapped to the edge it emits, its collection recipe, and what leaks.
406
aws
377
azure
265
gcp
563
critical severity
250
medium severity
233
high severity
2
low severity
ListTagsForResource.Tags.<value> - leaks credential, sensitive_data
ListTagsForResource.Tags[].Value - leaks credential, sensitive_data
GetEnabledControl.enabledControlDetails.parameters[].value - leaks sensitive_data, credential
GetLandingZone.landingZone.manifest - leaks sensitive_data, pii, credential
ListTagsForResource.tags.<value> - leaks credential, sensitive_data
DescribePipelines.pipelineDescriptionList[].tags[].value - leaks credential, sensitive_data
ListTagsForResource.Tags.<value> - leaks credential, sensitive_data
DescribeTags.resourceTags[].tags[].value - leaks credential, sensitive_data
DescribeDBClusterParameters.Parameters[].ParameterValue - leaks credential, connection_string, sensitive_data
CloudWatch Logs event.message for DocumentDB profiler/audit logs - leaks credential, sensitive_data, pii
ListTagsForResource.TagList[].Value - leaks credential, sensitive_data
ListTagsForResource.Tags[].Value - leaks credential, sensitive_data, pii
GetResourcePolicy.Policy - leaks credential, sensitive_data
ListTagsOfResource.Tags[].Value - leaks credential, sensitive_data
DescribeSnapshots.Snapshots[].Description - leaks credential, sensitive_data
DescribeSnapshots.Snapshots[].Tags[].Value - leaks credential, sensitive_data, pii
GetConsoleOutput.Output - leaks credential, password, api_key, sensitive_data
DescribeTags.Tags[].Value - leaks credential, sensitive_data, pii
GetRepositoryPolicy.policyText - leaks credential, sensitive_data
ListTagsForResource.tags[].Value - leaks credential, sensitive_data
ListTagsForResource.tags[].value - leaks credential, sensitive_data
ListTagsForResource.Tags[].Value - leaks credential, sensitive_data
DescribeCluster.cluster.tags.<value> - leaks credential, sensitive_data
ListTagsForResource.TagList[].Value - leaks credential, sensitive_data
S3 ELB/ALB/NLB access log object body - leaks credential, api_key, bearer_token, session_token, pii, sensitive_data
DescribeRules.Rules[].Actions[].FixedResponseConfig.MessageBody - leaks credential, api_key, sensitive_data
DescribeTags.TagDescriptions[].Tags[].Value - leaks credential, sensitive_data
DescribeCluster.Cluster.Tags[].Value - leaks credential, sensitive_data
ListTagsForResource.Tags[].Value - leaks credential, sensitive_data
DescribeRule.EventPattern - leaks credential, api_key, sensitive_data
GetPolicy.Policy.ResourceTags[].Value - leaks credential, sensitive_data, pii
ListTagsForResource.TagList[].Value - leaks credential, sensitive_data
ListTagsForResource.Tags[].Value - leaks credential, sensitive_data
ListTagsForResource.Tags[].Value - leaks credential, sensitive_data
GetTags.Tags.<value> - leaks credential, sensitive_data
GetSchemaVersion.SchemaDefinition - leaks credential, sensitive_data, pii
ListTagsForResource.Tags.<value> - leaks credential, sensitive_data
GetGroupPolicy.PolicyDocument - leaks credential, sensitive_data
GetRolePolicy.PolicyDocument - leaks credential, sensitive_data
GetUserPolicy.PolicyDocument - leaks credential, sensitive_data
GetPolicyVersion.PolicyVersion.Document - leaks credential, sensitive_data
ListRoleTags.Tags[].Value - leaks credential, sensitive_data
ListUserTags.Tags[].Value - leaks credential, sensitive_data, pii
ListTagsForResource.tags.<value> - leaks credential, sensitive_data
ListTagsForResource.tags.<value> - leaks credential, sensitive_data
ListTagsForResource.tags[].value - leaks credential, sensitive_data
ListTagsForStream.Tags[].Value - leaks credential, sensitive_data
CloudTrail event requestParameters.encryptionContext for KMS Encrypt/Decrypt/GenerateDataKey - leaks credential, sensitive_data, pii
DescribeKey.KeyMetadata.Description - leaks credential, sensitive_data
ListResourceTags.Tags[].TagValue - leaks credential, sensitive_data