Reference detail
CWE-200 — Exposure of Sensitive Information to an Unauthorized Actor
Recorded findings mapped to this weakness category. Review the detection and its context in the app report.
Mapped findings are review signals. Interpret each app’s build, scan date and coverage before drawing a conclusion. Historical verification describes only its recorded scan time.
Mapped checks & review guidance (13)
Amazon S3 bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryFirebase Realtime Database reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryGoogle Cloud Storage reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryDigitalOcean Spaces reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryHard-coded endpoint URL
Review whether the endpoint should be configurable rather than hard-coded; confirm it is not an internal/staging host.
Firebase Storage bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryCloud Firestore reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categorySentry DSN
A client DSN is low-risk but confirm it is a client (not internal) DSN and cannot be abused to spoof events.
Browse this categorySupabase project reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryCloudflare R2 bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Backblaze B2 bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryWasabi bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryAlibaba Cloud OSS bucket reference
Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.
Browse this categoryApps with mapped findings
4793 matching apps · Counts below include only this page’s mapped finding types.
PikPak-Safe Cloud, Video Saver
com.pikcloud.pikpakBuild 2.5.1 · 2026-10-14 02:35 UTC3 matching categories · 15 matching occurrences
Nextcloud
com.nextcloud.clientBuild 35.0.1 · 2026-10-14 02:33 UTC2 matching categories · 2 matching occurrences
Autosync - File Sync & Backup
com.ttxapps.autosyncBuild 7.7.13 · 2026-10-14 02:32 UTC2 matching categories · 2 matching occurrences
Dictionary.com: English Words
com.dictionaryBuild 12.1.3 · 2026-10-14 02:27 UTC3 matching categories · 3 matching occurrences
Prank Call Voice Changer App
com.prankcalllabs.prankcallappBuild 1.7.2 · 2026-10-14 02:24 UTC3 matching categories · 3 matching occurrences
Rolly: AI Budget Money Tracker
com.jc.rollymoneytrackerBuild 15.5.7 · 2026-10-14 02:20 UTC2 matching categories · 47 matching occurrences
ResumeUp - AI Resume Builder
com.uptech.resumeCoverAppUpBuild 1.6.7 · 2026-10-14 02:15 UTC1 matching category · 2 matching occurrences
XeNo: AI File Manager
filemanager.ai.personnel.assistantBuild 1.4.0 · 2026-10-14 02:12 UTC1 matching category · 2 matching occurrences
TenderU - Online video chat
com.client.tenderu.androidBuild 2.3.7 · 2026-10-14 02:09 UTC2 matching categories · 2 matching occurrences
SAHI : Options & Stock Trading
com.aaritya.sahi_trade_appBuild 1.0 · 2026-10-14 02:03 UTC4 matching categories · 8 matching occurrences
Avast Cleanup – Phone Cleaner
com.avast.android.cleanerBuild 26.16.1 · 2026-10-14 01:56 UTC2 matching categories · 2 matching occurrences
TableTone: Tabletop RPG Sounds
com.greenlobstermt.table_toneBuild 1.37.0 · 2026-10-14 01:46 UTC1 matching category · 1 matching occurrence
mail.com: Email app & Cloud
com.mail.mobile.android.mailBuild 9.18.3 · 2026-10-14 01:45 UTC2 matching categories · 2 matching occurrences
Leo Camera Translator PDF Scan
com.leolegaltechapps.pdfdocscannerBuild 3.8 · 2026-10-14 01:35 UTC2 matching categories · 4 matching occurrences
Drum Pad DJ - Beat Maker Pro
drumpad.dj.music.beat.makerBuild 1.1.2 · 2026-10-14 01:32 UTC2 matching categories · 2 matching occurrences
Unroll.Me - Inbox Mail Cleaner
com.unrollmeBuild 3.3.32 · 2026-10-14 01:30 UTC2 matching categories · 2 matching occurrences
Philips Avent Baby Monitor+
com.philips.ph.babymonitorplusBuild 1.9.1 · 2026-10-14 01:29 UTC1 matching category · 1 matching occurrence
Crunchyroll Manga
com.crunchyroll.mangaBuild 1.5.6 · 2026-10-14 01:26 UTC1 matching category · 2 matching occurrences
Огонь VPN
com.ogonconnect.appBuild 0.99.4 · 2026-10-14 01:22 UTC1 matching category · 32 matching occurrences
MeetMe: Go Live & Stream Now
com.myyearbook.mBuild 236.1 · 2026-10-14 01:08 UTC3 matching categories · 7 matching occurrences
eM Client - Secure Email App
com.emclient.mailclientBuild 11.0.907 · 2026-10-14 01:05 UTC1 matching category · 1 matching occurrence
Fender Guitar Tuner
com.fender.tunerBuild 4.17.1 · 2026-10-14 01:04 UTC2 matching categories · 2 matching occurrences
WiFiman
com.ubnt.usurveyBuild 2.13.0 · 2026-10-14 01:01 UTC2 matching categories · 2 matching occurrences
celebrate: share photo & video
app.celebrate.celphoBuild 23.0.0 · 2026-10-14 00:59 UTC4 matching categories · 4 matching occurrences
Jaumo Dating App: Flirt & Date
com.jaumoBuild 202610.1.3 · 2026-10-14 00:57 UTC2 matching categories · 2 matching occurrences