Reference detail
CWE-200 — Exposure of Sensitive Information to an Unauthorized Actor
Recorded findings mapped to this weakness category. Review the detection and its context in the app report.
Mapped findings are review signals. Interpret each app’s build, scan date and coverage before drawing a conclusion. Historical verification describes only its recorded scan time.
Mapped checks & review guidance (13)
Amazon S3 bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryFirebase Realtime Database reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryGoogle Cloud Storage reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryDigitalOcean Spaces reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryHard-coded endpoint URL
Review whether the endpoint should be configurable rather than hard-coded; confirm it is not an internal/staging host.
Firebase Storage bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryCloud Firestore reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categorySentry DSN
A client DSN is low-risk but confirm it is a client (not internal) DSN and cannot be abused to spoof events.
Browse this categorySupabase project reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryCloudflare R2 bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Backblaze B2 bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryWasabi bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryAlibaba Cloud OSS bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryApps with mapped findings
4807 matching apps · Counts below include only this page’s mapped finding types.
Today Weather:Data by NOAA/NWS
mobi.lockdown.weatherBuild 2.5.2-2 · 2026-10-13 00:13 UTC3 matching categories · 6 matching occurrences
SNOW - AI Profile
com.campmobile.snowBuild 15.4.6 · 2026-10-13 00:08 UTC2 matching categories · 2 matching occurrences
Bitdefender SecurePass
com.bitdefender.securepassBuild 2.5.1 · 2026-10-13 00:05 UTC2 matching categories · 5 matching occurrences
PoS Cash Register
ml.mixxamm.poscashregisterBuild 2.1.11 · 2026-10-13 00:03 UTC1 matching category · 6 matching occurrences
HelloDIAL - Call CRM
io.helloleads.dialerBuild 1.7.5 · 2026-10-13 00:02 UTC2 matching categories · 2 matching occurrences
Notebloc Scanner - Scan to PDF
com.notebloc.appBuild 5.9.1 · 2026-10-13 00:00 UTC4 matching categories · 50 matching occurrences
Memasik - Meme Maker
com.nick.memasikBuild 8.1.0 · 2026-10-12 23:53 UTC2 matching categories · 7 matching occurrences
Any TV Remote Control
io.klebo.tvremoteBuild 1.0.66 · 2026-10-12 23:52 UTC1 matching category · 1 matching occurrence
Voice Recorder - XVoice
recorderpro.voicememos.audioBuild 6.6 · 2026-10-12 23:50 UTC1 matching category · 1 matching occurrence
SMS Drive - Backup & Restore
devesh.ephrine.backup.smsBuild 3.0.8 · 2026-10-12 23:47 UTC2 matching categories · 4 matching occurrences
Study.com - Online Courses
com.study.appBuild 2.1.27 · 2026-10-12 23:42 UTC1 matching category · 1 matching occurrence
MyVTech Baby Pro
com.cams.vtech.mvb.proBuild 1.2.3 · 2026-10-12 23:41 UTC2 matching categories · 2 matching occurrences
Resideo - Smart Home
com.honeywell.android.lyricBuild 6.21.1 · 2026-10-12 23:39 UTC2 matching categories · 2 matching occurrences
Homes.com Real Estate & Rent
com.homes.homesdotcomBuild 18.7.0 · 2026-10-12 23:37 UTC1 matching category · 2 matching occurrences
HelloTalk - Learn Languages
com.hellotalkBuild 6.4.20 · 2026-10-12 23:36 UTC3 matching categories · 4 matching occurrences
Disney+
com.disney.disneyplusBuild 26.18.0+rc5-2026.10.05 · 2026-10-12 23:33 UTC1 matching category · 2 matching occurrences
WeComics TH: Webtoon
com.ookbee.ookbeecomics.androidBuild 3.0.4.50 · 2026-10-12 23:30 UTC2 matching categories · 2 matching occurrences
Bike Race：Motorcycle Games
com.topfreegames.bikeracefreeworldBuild 8.26.0 · 2026-10-12 23:29 UTC3 matching categories · 8 matching occurrences
Fruit Ninja®
com.halfbrick.fruitninjafreeBuild 3.97.9 · 2026-10-12 23:24 UTC3 matching categories · 6 matching occurrences
Calorie Counter - MyNetDiary
com.fourtechnologies.mynetdiary.adBuild 9.8.9 · 2026-10-12 23:22 UTC2 matching categories · 2 matching occurrences
Text Free: Second Phone Number
com.pinger.textfreeBuild 13.28 · 2026-10-12 23:20 UTC2 matching categories · 2 matching occurrences
Sleep Sounds - relaxing sounds
relax.sleep.relaxation.sleepingsoundsBuild 2.11.2 · 2026-10-12 23:17 UTC2 matching categories · 2 matching occurrences
Park Master
com.kayac.park_masterBuild 3.2.7 · 2026-10-12 23:15 UTC3 matching categories · 3 matching occurrences
Photo Gallery - Album, Vault
photo.manager.private.photogalleryBuild 5.7.3 · 2026-10-12 23:14 UTC2 matching categories · 3 matching occurrences
adidas: Shop Shoes & Clothing
com.adidas.appBuild 6.16.0 · 2026-10-12 23:12 UTC2 matching categories · 4 matching occurrences