Reference detail
CWE-200 — Exposure of Sensitive Information to an Unauthorized Actor
Recorded findings mapped to this weakness category. Review the detection and its context in the app report.
Mapped findings are review signals. Interpret each app’s build, scan date and coverage before drawing a conclusion. Historical verification describes only its recorded scan time.
Mapped checks & review guidance (13)
Amazon S3 bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryFirebase Realtime Database reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryGoogle Cloud Storage reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryDigitalOcean Spaces reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryHard-coded endpoint URL
Review whether the endpoint should be configurable rather than hard-coded; confirm it is not an internal/staging host.
Firebase Storage bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryCloud Firestore reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categorySentry DSN
A client DSN is low-risk but confirm it is a client (not internal) DSN and cannot be abused to spoof events.
Browse this categorySupabase project reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryCloudflare R2 bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Backblaze B2 bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryWasabi bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryAlibaba Cloud OSS bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryApps with mapped findings
4984 matching apps · Counts below include only this page’s mapped finding types.
Midnight Stories: Love Choices
com.DefaultCompany.MidnightstoriesBuild 2.1.3 · 2026-09-26 23:01 UTC2 matching categories · 2 matching occurrences
Gallery
com.gallery.pictures.photogalleryBuild 1.7 · 2026-09-26 17:07 UTC1 matching category · 2 matching occurrences
Siberalem: Arkadaşlık & Sohbet
com.workbench.siberalemBuild 6.1.16 · 2026-09-26 12:13 UTC3 matching categories · 3 matching occurrences
Live Video Call - Live chat
gallery.app.silicon.photosvideoBuild 4.5 · 2026-09-26 11:43 UTC1 matching category · 1 matching occurrence
PawAI: AI Cartoon Pet Filter
com.pawai.aifilter.aiimagegenerator.cartoonify.aicartoonBuild 53 · 2026-09-26 05:42 UTC2 matching categories · 2 matching occurrences
Defense legend 4 HD: Sci-fi TD
com.Gcenter.Defenselegend4.HD.TowerDefense.TDBuild 5.1 · 2026-09-25 07:28 UTC2 matching categories · 2 matching occurrences
OPay - Send Money Fast
team.opay.pay.pakistanBuild 2.0.25.32 · 2026-09-25 04:21 UTC2 matching categories · 4 matching occurrences
mewe: The Safe Network
com.meweBuild 9.0.25.1 · 2026-09-24 22:45 UTC2 matching categories · 2 matching occurrences
Tumblr: Social Media & Art
com.tumblrBuild 46.3.0.110 · 2026-09-23 16:57 UTC2 matching categories · 2 matching occurrences
Koer: Afrikaanse Dating App
za.co.koer.appBuild 3.4.1 · 2026-09-23 14:14 UTC2 matching categories · 2 matching occurrences
JMU Grad
com.u360mobile.jmuBuild 3.1 · 2026-09-23 08:34 UTC2 matching categories · 2 matching occurrences
Tiff's Treats
com.tiffstreats.cookiedeliveryBuild v6.1.0 · 2026-09-22 22:42 UTC3 matching categories · 3 matching occurrences
緣圈 - 每日16名配對交友
com.endressdreamtw.lovetingBuild 8.1.21 · 2026-09-22 20:58 UTC3 matching categories · 10 matching occurrences
TAPinto.net
net.tapinto.appBuild 1.0.0 · 2026-09-22 15:13 UTC1 matching category · 9 matching occurrences
[VIP] Mr. Balcan Idle
com.superclay.vipbalcanBuild 1.408 · 2026-09-22 02:10 UTC2 matching categories · 5 matching occurrences
Muhabbat Shayari - محبت شاعری
com.elytelabs.muhabbatshayariBuild 2.1 · 2026-09-20 22:32 UTC1 matching category · 1 matching occurrence
Sudoku Master Premium: Offline
com.ANOOGAMES.SudokuMasterPremiumOfflineBuild 3.8 · 2026-09-20 07:25 UTC1 matching category · 1 matching occurrence
Memes.com + Memes Maker
com.memes.plusBuild 3.2.16 · 2026-09-20 03:09 UTC2 matching categories · 2 matching occurrences
Futebol da Copa
camara.worldcup.copadomundoBuild 3.3.0 · 2026-09-19 20:16 UTC1 matching category · 1 matching occurrence
شات عربي - دردشة تعارف وتسلية
chat.arabic.arabicapkBuild 12.35 · 2026-09-19 11:40 UTC2 matching categories · 2 matching occurrences
Green Entrepreneur
com.maz.combo1987Build 16.0 · 2026-09-19 07:18 UTC3 matching categories · 3 matching occurrences
Anify: Anime, Manga & Novels
com.cleanstack.anifyBuild Satori 1.9 · 2026-09-19 03:03 UTC1 matching category · 1 matching occurrence
Свои Плюсы Едадил — кешбэк
com.edadeal.androidBuild 26.36.0 · 2026-09-19 02:28 UTC2 matching categories · 2 matching occurrences
Chai: Chat AI Platform
com.Beauchamp.Messenger.externalBuild 0.4.417 · 2026-09-18 12:40 UTC3 matching categories · 14 matching occurrences