Exposure DB
1,048 exposure sites - every place a customer-controlled credential or secret can leak - each mapped to the edge it emits, its collection recipe, and what leaks.
406
aws
377
azure
265
gcp
563
critical severity
250
medium severity
233
high severity
2
low severity
GetDeployment.deploymentInfo.revision.appSpecContent.content - leaks source_code_secret, credential, password, api_key, connection_string
ListTagsForResource.Tags[].Value - leaks credential, sensitive_data
GetDeployment.DeploymentInfo.Revision.S3Location / GitHubLocation -> revision files - leaks source_code_secret, credential, password, api_key, private_key, connection_string
GetPipeline.pipeline.stages[].actions[].configuration.<value> - leaks credential, password, api_key, oauth_token, connection_string, sensitive_data
ListActionExecutions.actionExecutionDetails[].output.executionResult.externalExecutionSummary - leaks credential, password, api_key, sensitive_data
ListActionExecutions.actionExecutionDetails[].output.outputVariables.<value> - leaks credential, password, api_key, connection_string, sensitive_data
ListTagsForResource.tags[].value - leaks credential, sensitive_data
GetPipeline.pipeline.variables[].defaultValue - leaks credential, password, api_key, connection_string, sensitive_data
DescribeUserPoolClient.UserPoolClient.ClientSecret - leaks secret_key, oauth_token, credential
cognito-sync:ListRecords.Records[].Value - leaks customer_data, sensitive_data, credential
ListUsers.Users[].Attributes[].Value - leaks pii, sensitive_data, credential
ListTagsForResource.Tags.<value> - leaks credential, sensitive_data
SelectResourceConfig.Results[] - leaks credential, password, api_key, pii, sensitive_data
SelectAggregateResourceConfig.Results[] - leaks credential, password, api_key, pii, sensitive_data
DescribeRemediationConfigurations.RemediationConfigurations[].Parameters.<name>.StaticValue.Values[] - leaks credential, password, api_key, connection_string, sensitive_data
BatchGetResourceConfig.baseConfigurationItems[].configuration / supplementaryConfiguration - leaks credential, password, api_key, connection_string, pii, sensitive_data
ListTagsForResource.Tags[].Value - leaks credential, sensitive_data
DescribeConfigRules.ConfigRules[].InputParameters - leaks credential, password, api_key, sensitive_data
GetEnabledControl.enabledControlDetails.parameters[].value - leaks sensitive_data, credential
GetLandingZone.landingZone.manifest - leaks sensitive_data, pii, credential
ListTagsForResource.tags.<value> - leaks credential, sensitive_data
GetPipelineDefinition.pipelineObjects[].fields[].stringValue / refValue - leaks credential, password, api_key, access_key, secret_key, connection_string, database_credential
GetPipelineDefinition.parameterValues[].stringValue - leaks credential, password, api_key, connection_string, sensitive_data
DescribePipelines.pipelineDescriptionList[].tags[].value - leaks credential, sensitive_data
PollForTask.taskObject.objects.<object-id>.fields[].stringValue - leaks credential, password, api_key, access_key, secret_key, connection_string, database_credential
ListIndicators.Indicators[].IndicatorDetail - leaks access_key, pii, sensitive_data, customer_data
ListTagsForResource.Tags.<value> - leaks credential, sensitive_data
DescribeTags.resourceTags[].tags[].value - leaks credential, sensitive_data
DescribeRouterConfiguration.customerRouterConfig - leaks password, signing_secret, credential, sensitive_data
DescribeVirtualInterfaces.virtualInterfaces[].authKey - leaks password, signing_secret, credential
DescribeDBClusterParameters.Parameters[].ParameterValue - leaks credential, connection_string, sensitive_data
MongoDB find/aggregate response documents - leaks credential, password, api_key, session_token, connection_string, customer_data, pii
CreateDBCluster.MasterUserPassword / ModifyDBCluster.MasterUserPassword - leaks password, database_credential, credential
CloudWatch Logs event.message for DocumentDB profiler/audit logs - leaks credential, sensitive_data, pii
ListTagsForResource.TagList[].Value - leaks credential, sensitive_data
ConnectDirectory.ConnectSettings.Password - leaks password, database_credential, credential
CreateMicrosoftAD.Password / ResetUserPassword.NewPassword - leaks password, credential
ListTagsForResource.Tags[].Value - leaks credential, sensitive_data, pii
CreateTrust.TrustPassword - leaks password, credential
Scan.Items[].<attribute-name> - leaks credential, password, api_key, access_key, secret_key, connection_string, customer_data, pii
dynamodbstreams:GetRecords.Records[].dynamodb.NewImage / Records[].dynamodb.OldImage - leaks credential, password, api_key, customer_data, pii
GetResourcePolicy.Policy - leaks credential, sensitive_data
ListTagsOfResource.Tags[].Value - leaks credential, sensitive_data
GetSnapshotBlock.BlockData - leaks credential, password, api_key, access_key, secret_key, private_key, customer_data, source_code_secret
DescribeSnapshots.Snapshots[].Description - leaks credential, sensitive_data
DescribeSnapshots.Snapshots[].Tags[].Value - leaks credential, sensitive_data, pii
GetConsoleOutput.Output - leaks credential, password, api_key, sensitive_data
DescribeInstanceAttribute.UserData.Value (Attribute=userData) - leaks credential, password, api_key, access_key, secret_key, source_code_secret
CreateKeyPair.KeyMaterial - leaks private_key, credential
DescribeLaunchTemplateVersions.LaunchTemplateVersions[].LaunchTemplateData.UserData - leaks credential, password, api_key, access_key, secret_key, source_code_secret