Skip to content

Bug bounty program

Platform
HackerOne
Bounties
Pays
Assets in scope
86
Disclosed reports
15
Subdomains
7,102
Vendor on CyberSIXT
Logitech (26 CVEs, 0 exploited)

Most upvoted reports15

All reports
Most upvoted reports of Logitech
ReportWeaknessDisclosedBountyVotes
One Click Account takeover using Ouath CSRF bypass by adding Null byte %00 in state parameter on www.streamlabs.comAnalysed#1046630Cross-Site Request Forgery2021-01-06–99
Manipulating response leads to free access to Streamlabs PrimeAnalysed#1070510Input Validation and Logic2021-01-21–80
Stored XSS in [https://streamlabs.com/dashboard#/*goal] pagesAnalysed#1049012Cross-site Scripting2020-12-26–68
IDOR when creating App on [platform.streamlabs.com/api/v1/store/whitelist] with user_id fieldAnalysed#983070Insecure Direct Object Reference2020-11-26–61
session takeover via open protocol redirection on streamlabs.comAnalysed#1178239Open Redirect2021-09-01$20050
CSRF in changing users donation_settings [https://streamlabs.com/api/v6/viewer-portal/viewer-settings/donation_settings]Analysed#1049360Cross-Site Request Forgery2020-12-26–49
SSRF allows reading AWS EC2 metadata using "readapi" variable in Streamlabs CloudbotAnalysed#1108418Server-Side Request Forgery2021-02-24$20041
Privilege Escalation Leads to Control The Owner Access Token Which leads to control the stream [streamlabs.com]Analysed#1174527Access Control2021-04-27–38
Host Header injection in oslo.io (using X-Forwarded-For header) leading to email spoofingAnalysed#1072277Input Validation and Logic2021-01-07–37
Sensitive information disclosure to shared access user via streamlabs platform apiAnalysed#1072893Information Disclosure2021-01-20$20036

Subdomains7,102

Subdomains of Logitech
NameScopeFirst seen
de585d348b3a24108f45956c.challonge.comNot in the scope2026-11-14
deadlabs.challonge.comNot in the scope2026-11-14
deathmatchtribe1.challonge.comNot in the scope2026-11-14
deepup.challonge.comNot in the scope2026-11-14
deetwenty.challonge.comNot in the scope2026-11-14
defactobottle.challonge.comNot in the scope2026-11-14
defendthenorth.challonge.comNot in the scope2026-11-14
defproject.challonge.comNot in the scope2026-11-14
delasallell8-10yo.challonge.comNot in the scope2026-11-14
delder.challonge.comNot in the scope2026-11-14
delfinoplaza.challonge.comNot in the scope2026-11-14
demboyz.challonge.comNot in the scope2026-11-14
demonictourneys.challonge.comNot in the scope2026-11-14
dendojo.challonge.comNot in the scope2026-11-14
denialesports.challonge.comNot in the scope2026-11-14
denilson.challonge.comNot in the scope2026-11-14
denilson123456.challonge.comNot in the scope2026-11-14
densetsufighters.challonge.comNot in the scope2026-11-14
depaulesports.challonge.comNot in the scope2026-11-14
derpcon.challonge.comNot in the scope2026-11-14
desseler.challonge.comNot in the scope2026-11-14
desync.challonge.comNot in the scope2026-11-14
detstun2k16.challonge.comNot in the scope2026-11-14
devoncorp.challonge.comNot in the scope2026-11-14
deweysmansion.challonge.comNot in the scope2026-11-14
dfcssb.challonge.comNot in the scope2026-11-14
dfh567.challonge.comNot in the scope2026-11-14
dfrag.challonge.comNot in the scope2026-11-14
www.dfrag.challonge.comNot in the scope2026-11-14
dfw9bt.challonge.comNot in the scope2026-11-14
dgcraft.challonge.comNot in the scope2026-11-14
dggp.challonge.comNot in the scope2026-11-14
dgsl.challonge.comNot in the scope2026-11-14
dgz.challonge.comNot in the scope2026-11-14
dhaustin.challonge.comNot in the scope2026-11-14
dhcanada.challonge.comNot in the scope2026-11-14
dhgg.challonge.comNot in the scope2026-11-14
diamesports.challonge.comNot in the scope2026-11-14
diamleag.challonge.comNot in the scope2026-11-14
diamondsporttcsesports.challonge.comNot in the scope2026-11-14
diceanddoonuts.challonge.comNot in the scope2026-11-14
dicethrone.challonge.comNot in the scope2026-11-14
dido.challonge.comNot in the scope2026-11-14
diggame.challonge.comNot in the scope2026-11-14
digitalextremes.challonge.comNot in the scope2026-11-14
dijitalsporlar.challonge.comNot in the scope2026-11-14
dirtybagscornhole.challonge.comNot in the scope2026-11-14
dirtysouthgaming.challonge.comNot in the scope2026-11-14
disciples.challonge.comNot in the scope2026-11-14
discjamdojo.challonge.comNot in the scope2026-11-14
discmania.challonge.comNot in the scope2026-11-14
dispatch.challonge.comNot in the scope2026-11-14
dissidiacommunity.challonge.comNot in the scope2026-11-14
div01.challonge.comNot in the scope2026-11-14
div2.challonge.comNot in the scope2026-11-14
div3.challonge.comNot in the scope2026-11-14
div4.challonge.comNot in the scope2026-11-14
dkc1.challonge.comNot in the scope2026-11-14
dkit.challonge.comNot in the scope2026-11-14
dkr.challonge.comNot in the scope2026-11-14
dksc.challonge.comNot in the scope2026-11-14
dl4-5.challonge.comNot in the scope2026-11-14
dlg1.challonge.comNot in the scope2026-11-14
dlife.challonge.comNot in the scope2026-11-14
dmg-tms.challonge.comNot in the scope2026-11-14
dmnorth.challonge.comNot in the scope2026-11-14
dmr1v1cpm.challonge.comNot in the scope2026-11-14
dmuesports.challonge.comNot in the scope2026-11-14
dmx.challonge.comNot in the scope2026-11-14
dnaboardgamescafe.challonge.comNot in the scope2026-11-14
dnamictv.challonge.comNot in the scope2026-11-14
dneudnm.challonge.comNot in the scope2026-11-14
dng.challonge.comNot in the scope2026-11-14
dns.challonge.comNot in the scope2026-11-14
dntourneyshimom.challonge.comNot in the scope2026-11-14
dnts.challonge.comNot in the scope2026-11-14
dnz.challonge.comNot in the scope2026-11-14
doa.challonge.comNot in the scope2026-11-14
doa2014.challonge.comNot in the scope2026-11-14
doa2015.challonge.comNot in the scope2026-11-14
doesplay.challonge.comNot in the scope2026-11-14
dojis.challonge.comNot in the scope2026-11-14
dojo.challonge.comNot in the scope2026-11-14
dojoes.challonge.comNot in the scope2026-11-14
dojooculto.challonge.comNot in the scope2026-11-14
dokbartz.challonge.comNot in the scope2026-11-14
dom.challonge.comNot in the scope2026-11-14
dom2015.challonge.comNot in the scope2026-11-14
dom2017.challonge.comNot in the scope2026-11-14
dominion.challonge.comNot in the scope2026-11-14
dominionstrategy.challonge.comNot in the scope2026-11-14
dominoaddicts.challonge.comNot in the scope2026-11-14
dominoaddictsfives.challonge.comNot in the scope2026-11-14
dominobiatch.challonge.comNot in the scope2026-11-14
dominoempire.challonge.comNot in the scope2026-11-14
dominogz.challonge.comNot in the scope2026-11-14
dominohavenfb.challonge.comNot in the scope2026-11-14
dominoheavyhitters.challonge.comNot in the scope2026-11-14
donovancs.challonge.comNot in the scope2026-11-14
dontbefail.challonge.comNot in the scope2026-11-14

1,405 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.