Skip to content

Bug bounty program

Platform
HackerOne
Bounties
Pays
Assets in scope
86
Disclosed reports
15
Subdomains
7,102
Vendor on CyberSIXT
Logitech (26 CVEs, 0 exploited)

Most upvoted reports15

All reports
Most upvoted reports of Logitech
ReportWeaknessDisclosedBountyVotes
One Click Account takeover using Ouath CSRF bypass by adding Null byte %00 in state parameter on www.streamlabs.comAnalysed#1046630Cross-Site Request Forgery2021-01-06–99
Manipulating response leads to free access to Streamlabs PrimeAnalysed#1070510Input Validation and Logic2021-01-21–80
Stored XSS in [https://streamlabs.com/dashboard#/*goal] pagesAnalysed#1049012Cross-site Scripting2020-12-26–68
IDOR when creating App on [platform.streamlabs.com/api/v1/store/whitelist] with user_id fieldAnalysed#983070Insecure Direct Object Reference2020-11-26–61
session takeover via open protocol redirection on streamlabs.comAnalysed#1178239Open Redirect2021-09-01$20050
CSRF in changing users donation_settings [https://streamlabs.com/api/v6/viewer-portal/viewer-settings/donation_settings]Analysed#1049360Cross-Site Request Forgery2020-12-26–49
SSRF allows reading AWS EC2 metadata using "readapi" variable in Streamlabs CloudbotAnalysed#1108418Server-Side Request Forgery2021-02-24$20041
Privilege Escalation Leads to Control The Owner Access Token Which leads to control the stream [streamlabs.com]Analysed#1174527Access Control2021-04-27–38
Host Header injection in oslo.io (using X-Forwarded-For header) leading to email spoofingAnalysed#1072277Input Validation and Logic2021-01-07–37
Sensitive information disclosure to shared access user via streamlabs platform apiAnalysed#1072893Information Disclosure2021-01-20$20036

Subdomains7,102

Subdomains of Logitech
NameScopeFirst seen
csm.challonge.comNot in the scope2026-11-14
csns.challonge.comNot in the scope2026-11-14
csntourneysssbmsmash4.challonge.comNot in the scope2026-11-14
cspiregaming.challonge.comNot in the scope2026-11-14
csplat.challonge.comNot in the scope2026-11-14
cst.challonge.comNot in the scope2026-11-14
cstat.challonge.comNot in the scope2026-11-14
cstatfgc.challonge.comNot in the scope2026-11-14
ctbtht.challonge.comNot in the scope2026-11-14
ctd2.challonge.comNot in the scope2026-11-14
ctd2ll.challonge.comNot in the scope2026-11-14
ctmelee.challonge.comNot in the scope2026-11-14
cto.challonge.comNot in the scope2026-11-14
ctrl-a.challonge.comNot in the scope2026-11-14
ctsapr2012.challonge.comNot in the scope2026-11-14
ctsix.challonge.comNot in the scope2026-11-14
ctsm4sh.challonge.comNot in the scope2026-11-14
ctstockexchange.challonge.comNot in the scope2026-11-14
ctultimate.challonge.comNot in the scope2026-11-14
cu.challonge.comNot in the scope2026-11-14
cualquier.challonge.comNot in the scope2026-11-14
cubbygame.challonge.comNot in the scope2026-11-14
cubicworlds.challonge.comNot in the scope2026-11-14
cugipvgcsmash4.challonge.comNot in the scope2026-11-14
cunninghamedistrictdarts.challonge.comNot in the scope2026-11-14
curleh.challonge.comNot in the scope2026-11-14
curlehmustache.challonge.comNot in the scope2026-11-14
curly-dev-community.challonge.comdevNot in the scope2026-11-14
custommagic.challonge.comNot in the scope2026-11-14
cvchsgameclub.challonge.comNot in the scope2026-11-14
cvf.challonge.comNot in the scope2026-11-14
cvs.challonge.comNot in the scope2026-11-14
cwg.challonge.comNot in the scope2026-11-14
cwlfake.challonge.comNot in the scope2026-11-14
cxm.challonge.comNot in the scope2026-11-14
cyantourneyorgan.challonge.comNot in the scope2026-11-14
cyberarenapro.challonge.comNot in the scope2026-11-14
cyberbonchcom.challonge.comNot in the scope2026-11-14
cybercorps.challonge.comNot in the scope2026-11-14
cyberdonbass.challonge.comNot in the scope2026-11-14
cyberfights.challonge.comNot in the scope2026-11-14
cybergameway.challonge.comNot in the scope2026-11-14
cyberleague.challonge.comNot in the scope2026-11-14
cybernsk.challonge.comNot in the scope2026-11-14
cyberolimp.challonge.comNot in the scope2026-11-14
cybersportdv.challonge.comNot in the scope2026-11-14
cybersportstudio.challonge.comNot in the scope2026-11-14
cyspnet.challonge.comNot in the scope2026-11-14
cytex.challonge.comNot in the scope2026-11-14
cza-online.challonge.comNot in the scope2026-11-14
czecharcade.challonge.comNot in the scope2026-11-14
czechbrawl.challonge.comNot in the scope2026-11-14
czechquake.challonge.comNot in the scope2026-11-14
d04b2b2f8ea876e8058be4ad.challonge.comNot in the scope2026-11-14
d0cf5208db09807169d077b2.challonge.comNot in the scope2026-11-14
d2tl.challonge.comNot in the scope2026-11-14
d3.challonge.comNot in the scope2026-11-14
d5679633efb6b2396bab437d.challonge.comNot in the scope2026-11-14
d6bb426f53e58a76aea598a5.challonge.comNot in the scope2026-11-14
d7a97c2e99dddd2192360e86.challonge.comNot in the scope2026-11-14
daddylandtourney.challonge.comNot in the scope2026-11-14
dadsquad.challonge.comNot in the scope2026-11-14
damagercup.challonge.comNot in the scope2026-11-14
dangertime.challonge.comNot in the scope2026-11-14
dankfalcn.challonge.comNot in the scope2026-11-14
danmer.challonge.comNot in the scope2026-11-14
dareroyale.challonge.comNot in the scope2026-11-14
darkassassins.challonge.comNot in the scope2026-11-14
darkempire.challonge.comNot in the scope2026-11-14
darknight.challonge.comNot in the scope2026-11-14
darkreavers.challonge.comNot in the scope2026-11-14
dart.challonge.comNot in the scope2026-11-14
dartjunkiesusa.challonge.comNot in the scope2026-11-14
dartrolton.challonge.comNot in the scope2026-11-14
dartsforlife.challonge.comNot in the scope2026-11-14
datnyfe.challonge.comNot in the scope2026-11-14
datteam.challonge.comNot in the scope2026-11-14
davidccook.challonge.comNot in the scope2026-11-14
davisny.challonge.comNot in the scope2026-11-14
davissmash.challonge.comNot in the scope2026-11-14
dawngate.challonge.comNot in the scope2026-11-14
dawsonesports.challonge.comNot in the scope2026-11-14
daytonsmash.challonge.comNot in the scope2026-11-14
dbfz-fightingday.challonge.comNot in the scope2026-11-14
dbfz-nihon1budokai.challonge.comNot in the scope2026-11-14
dbfz-wtjp.challonge.comNot in the scope2026-11-14
dbfzeudiscord.challonge.comNot in the scope2026-11-14
dbfzukdiscord.challonge.comNot in the scope2026-11-14
dbsuperaustralia.challonge.comNot in the scope2026-11-14
dbtdwl.challonge.comNot in the scope2026-11-14
dcesportslans.challonge.comNot in the scope2026-11-14
dcf1cc4e2c3cf17704f310cc.challonge.comNot in the scope2026-11-14
dcf330c47b398727ccc1e713.challonge.comNot in the scope2026-11-14
dcmelee.challonge.comNot in the scope2026-11-14
dcmetrobg.challonge.comNot in the scope2026-11-14
dcqueckborn.challonge.comNot in the scope2026-11-14
ddc.challonge.comNot in the scope2026-11-14
ddd8ddb45201d9972064b70b.challonge.comNot in the scope2026-11-14
ddrstorm.challonge.comNot in the scope2026-11-14
ddw.challonge.comNot in the scope2026-11-14

1,405 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.