Skip to content

Bug bounty program

Platform
HackerOne
Bounties
Pays
Assets in scope
86
Disclosed reports
15
Subdomains
7,102
Vendor on CyberSIXT
Logitech (26 CVEs, 0 exploited)

Most upvoted reports15

All reports
Most upvoted reports of Logitech
ReportWeaknessDisclosedBountyVotes
One Click Account takeover using Ouath CSRF bypass by adding Null byte %00 in state parameter on www.streamlabs.comAnalysed#1046630Cross-Site Request Forgery2021-01-06–99
Manipulating response leads to free access to Streamlabs PrimeAnalysed#1070510Input Validation and Logic2021-01-21–80
Stored XSS in [https://streamlabs.com/dashboard#/*goal] pagesAnalysed#1049012Cross-site Scripting2020-12-26–68
IDOR when creating App on [platform.streamlabs.com/api/v1/store/whitelist] with user_id fieldAnalysed#983070Insecure Direct Object Reference2020-11-26–61
session takeover via open protocol redirection on streamlabs.comAnalysed#1178239Open Redirect2021-09-01$20050
CSRF in changing users donation_settings [https://streamlabs.com/api/v6/viewer-portal/viewer-settings/donation_settings]Analysed#1049360Cross-Site Request Forgery2020-12-26–49
SSRF allows reading AWS EC2 metadata using "readapi" variable in Streamlabs CloudbotAnalysed#1108418Server-Side Request Forgery2021-02-24$20041
Privilege Escalation Leads to Control The Owner Access Token Which leads to control the stream [streamlabs.com]Analysed#1174527Access Control2021-04-27–38
Host Header injection in oslo.io (using X-Forwarded-For header) leading to email spoofingAnalysed#1072277Input Validation and Logic2021-01-07–37
Sensitive information disclosure to shared access user via streamlabs platform apiAnalysed#1072893Information Disclosure2021-01-20$20036

Subdomains7,102

Subdomains of Logitech
NameScopeFirst seen
charge-gaming.challonge.comNot in the scope2026-11-14
chargelan.challonge.comNot in the scope2026-11-14
charliemalayalammovieonline-2016.challonge.comNot in the scope2026-11-14
chchfgc.challonge.comNot in the scope2026-11-14
chcismash.challonge.comNot in the scope2026-11-14
cheesylairscii.challonge.comNot in the scope2026-11-14
chefscookingatconquest.challonge.comNot in the scope2026-11-14
chemxfgcu.challonge.comNot in the scope2026-11-14
chess.challonge.comNot in the scope2026-11-14
chesscomlive.challonge.comNot in the scope2026-11-14
chesterfields.challonge.comNot in the scope2026-11-14
chhdiv1.challonge.comNot in the scope2026-11-14
chhdiv3.challonge.comNot in the scope2026-11-14
chickencircuit.challonge.comNot in the scope2026-11-14
chif.challonge.comNot in the scope2026-11-14
chipotle.challonge.comNot in the scope2026-11-14
chivalry-esports.challonge.comNot in the scope2026-11-14
chnlpl2k.challonge.comNot in the scope2026-11-14
chobostarleague.challonge.comNot in the scope2026-11-14
cholucrew.challonge.comNot in the scope2026-11-14
chop2v2.challonge.comNot in the scope2026-11-14
chopsquad.challonge.comNot in the scope2026-11-14
chsgaming.challonge.comNot in the scope2026-11-14
chunk.challonge.comNot in the scope2026-11-14
churraskof27.challonge.comNot in the scope2026-11-14
cidercade.challonge.comNot in the scope2026-11-14
cifgc.challonge.comNot in the scope2026-11-14
circolocubo.challonge.comNot in the scope2026-11-14
citonox.challonge.comNot in the scope2026-11-14
cityofgamers.challonge.comNot in the scope2026-11-14
ciulclal.challonge.comNot in the scope2026-11-14
ck-smash.challonge.comNot in the scope2026-11-14
ckingdom.challonge.comNot in the scope2026-11-14
clan-chobo.challonge.comNot in the scope2026-11-14
clanbase.challonge.comNot in the scope2026-11-14
clandecima.challonge.comNot in the scope2026-11-14
clanhallaau.challonge.comNot in the scope2026-11-14
clanrushpractice.challonge.comNot in the scope2026-11-14
clansk.challonge.comNot in the scope2026-11-14
clarkade.challonge.comNot in the scope2026-11-14
clashofcomrades.challonge.comNot in the scope2026-11-14
clashrumble.challonge.comNot in the scope2026-11-14
clashtournaments.challonge.comNot in the scope2026-11-14
clasificatorias.challonge.comNot in the scope2026-11-14
classicmm.challonge.comNot in the scope2026-11-14
claymore.challonge.comNot in the scope2026-11-14
clearhome.challonge.comNot in the scope2026-11-14
clemsonsmash.challonge.comNot in the scope2026-11-14
clintonpropro.challonge.comNot in the scope2026-11-14
cloakdagger.challonge.comNot in the scope2026-11-14
cloudm.challonge.comNot in the scope2026-11-14
clt.challonge.comNot in the scope2026-11-14
clubcashalot.challonge.comNot in the scope2026-11-14
clubemperor.challonge.comNot in the scope2026-11-14
clutcharena.challonge.comNot in the scope2026-11-14
cmc.challonge.comNot in the scope2026-11-14
cmfi.challonge.comNot in the scope2026-11-14
cmgames.challonge.comNot in the scope2026-11-14
cmmknifecrossfire.challonge.comNot in the scope2026-11-14
cmuken.challonge.comNot in the scope2026-11-14
cn-tour.challonge.comNot in the scope2026-11-14
cnbackgammon.challonge.comNot in the scope2026-11-14
cncbattle.challonge.comNot in the scope2026-11-14
cnes.challonge.comNot in the scope2026-11-14
cnesuperawesomefirstness.challonge.comNot in the scope2026-11-14
cnll8-10yo.challonge.comNot in the scope2026-11-14
cnwcrew.challonge.comNot in the scope2026-11-14
cobaltleague.challonge.comNot in the scope2026-11-14
cobham.challonge.comNot in the scope2026-11-14
cobxgaming.challonge.comNot in the scope2026-11-14
coc-osm.challonge.comNot in the scope2026-11-14
cocacola.challonge.comNot in the scope2026-11-14
coconut.challonge.comNot in the scope2026-11-14
codchampsanz.challonge.comNot in the scope2026-11-14
codcodcod.challonge.comNot in the scope2026-11-14
codigodelsur.challonge.comNot in the scope2026-11-14
codr.challonge.comNot in the scope2026-11-14
coexistgaming.challonge.comNot in the scope2026-11-14
cof.challonge.comNot in the scope2026-11-14
coffsgamingleague.challonge.comNot in the scope2026-11-14
coganonymous.challonge.comNot in the scope2026-11-14
coh2org.challonge.comNot in the scope2026-11-14
coinupgames.challonge.comNot in the scope2026-11-14
colimaprogaming.challonge.comNot in the scope2026-11-14
collegecod.challonge.comNot in the scope2026-11-14
collegewrestlingpickem.challonge.comNot in the scope2026-11-14
collisionchampionship.challonge.comNot in the scope2026-11-14
colorado-events.challonge.comNot in the scope2026-11-14
colossalcon.challonge.comNot in the scope2026-11-14
colossalconeast.challonge.comNot in the scope2026-11-14
colosseum.challonge.comNot in the scope2026-11-14
columbusfg.challonge.comNot in the scope2026-11-14
columbusretro.challonge.comNot in the scope2026-11-14
columbussmash.challonge.comNot in the scope2026-11-14
columbusweeklysmash.challonge.comNot in the scope2026-11-14
combobreaker.challonge.comNot in the scope2026-11-14
combound.challonge.comNot in the scope2026-11-14
combustion.challonge.comNot in the scope2026-11-14
comelee.challonge.comNot in the scope2026-11-14
cometclash.challonge.comNot in the scope2026-11-14

1,405 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.