Skip to content

Bug bounty program

Platform
HackerOne
Bounties
Pays
Assets in scope
86
Disclosed reports
15
Subdomains
7,102
Vendor on CyberSIXT
Logitech (26 CVEs, 0 exploited)

Most upvoted reports15

All reports
Most upvoted reports of Logitech
ReportWeaknessDisclosedBountyVotes
One Click Account takeover using Ouath CSRF bypass by adding Null byte %00 in state parameter on www.streamlabs.comAnalysed#1046630Cross-Site Request Forgery2021-01-06–99
Manipulating response leads to free access to Streamlabs PrimeAnalysed#1070510Input Validation and Logic2021-01-21–80
Stored XSS in [https://streamlabs.com/dashboard#/*goal] pagesAnalysed#1049012Cross-site Scripting2020-12-26–68
IDOR when creating App on [platform.streamlabs.com/api/v1/store/whitelist] with user_id fieldAnalysed#983070Insecure Direct Object Reference2020-11-26–61
session takeover via open protocol redirection on streamlabs.comAnalysed#1178239Open Redirect2021-09-01$20050
CSRF in changing users donation_settings [https://streamlabs.com/api/v6/viewer-portal/viewer-settings/donation_settings]Analysed#1049360Cross-Site Request Forgery2020-12-26–49
SSRF allows reading AWS EC2 metadata using "readapi" variable in Streamlabs CloudbotAnalysed#1108418Server-Side Request Forgery2021-02-24$20041
Privilege Escalation Leads to Control The Owner Access Token Which leads to control the stream [streamlabs.com]Analysed#1174527Access Control2021-04-27–38
Host Header injection in oslo.io (using X-Forwarded-For header) leading to email spoofingAnalysed#1072277Input Validation and Logic2021-01-07–37
Sensitive information disclosure to shared access user via streamlabs platform apiAnalysed#1072893Information Disclosure2021-01-20$20036

Subdomains7,102

Subdomains of Logitech
NameScopeFirst seen
doomtours.challonge.comNot in the scope2026-11-14
dorans.challonge.comNot in the scope2026-11-14
dortmunderjungs.challonge.comNot in the scope2026-11-14
dota2minors.challonge.comNot in the scope2026-11-14
dota2smadda.challonge.comNot in the scope2026-11-14
dotamskcup.challonge.comNot in the scope2026-11-14
dots.challonge.comNot in the scope2026-11-14
dottnettromjulslan2016.challonge.comNot in the scope2026-11-14
doubledair.challonge.comNot in the scope2026-11-14
doubledown.challonge.comNot in the scope2026-11-14
downb.challonge.comNot in the scope2026-11-14
dplantest.challonge.comNot in the scope2026-11-14
dpsi.challonge.comNot in the scope2026-11-14
dq.challonge.comNot in the scope2026-11-14
dqw.challonge.comNot in the scope2026-11-14
dracaena.challonge.comNot in the scope2026-11-14
dragonslayergames.challonge.comNot in the scope2026-11-14
draguniti.challonge.comNot in the scope2026-11-14
drako1909tournament1.challonge.comNot in the scope2026-11-14
drakonia.challonge.comNot in the scope2026-11-14
dreamchasers.challonge.comNot in the scope2026-11-14
dreamhack.challonge.comNot in the scope2026-11-14
dreamlanders.challonge.comNot in the scope2026-11-14
dreamlandsmash.challonge.comNot in the scope2026-11-14
dreamteamcsgo.challonge.comNot in the scope2026-11-14
drexeldragonlan.challonge.comNot in the scope2026-11-14
drmario-discord-tournaments.challonge.comNot in the scope2026-11-14
dropkick.challonge.comNot in the scope2026-11-14
drphillipsllorlando.challonge.comNot in the scope2026-11-14
dsdsdsdsdsds.challonge.comNot in the scope2026-11-14
dtfgc.challonge.comNot in the scope2026-11-14
dti.challonge.comNot in the scope2026-11-14
dtr.challonge.comNot in the scope2026-11-14
dtulan.challonge.comNot in the scope2026-11-14
dublin.challonge.comNot in the scope2026-11-14
dubsmasterkush.challonge.comNot in the scope2026-11-14
duelacademyrp.challonge.comNot in the scope2026-11-14
duelcup.challonge.comNot in the scope2026-11-14
duelistsunite.challonge.comNot in the scope2026-11-14
duellinksmeta.challonge.comNot in the scope2026-11-14
duelystc.challonge.comNot in the scope2026-11-14
duhrveuivn.challonge.comNot in the scope2026-11-14
dulliecollie.challonge.comNot in the scope2026-11-14
dumau2017gi.challonge.comNot in the scope2026-11-14
dunedinsmash.challonge.comNot in the scope2026-11-14
duniakuesport.challonge.comNot in the scope2026-11-14
duotf.challonge.comNot in the scope2026-11-14
durhampm.challonge.comNot in the scope2026-11-14
dust.challonge.comNot in the scope2026-11-14
dutchbrawlers.challonge.comNot in the scope2026-11-14
dutchdota.challonge.comNot in the scope2026-11-14
dvd667.challonge.comNot in the scope2026-11-14
dventiongaming.challonge.comNot in the scope2026-11-14
dwl.challonge.comNot in the scope2026-11-14
dyfwi.challonge.comNot in the scope2026-11-14
dynastycup.challonge.comNot in the scope2026-11-14
dynastydarts.challonge.comNot in the scope2026-11-14
dz-esport-powaa.challonge.comNot in the scope2026-11-14
dzn.challonge.comNot in the scope2026-11-14
e-games2018.challonge.comNot in the scope2026-11-14
e-go.challonge.comNot in the scope2026-11-14
e-sportlov.challonge.comNot in the scope2026-11-14
e-sportsalliance.challonge.comNot in the scope2026-11-14
e01ef80489ce77cee1584626.challonge.comNot in the scope2026-11-14
e0f32a2876f367d7e321726b.challonge.comNot in the scope2026-11-14
e2c.challonge.comNot in the scope2026-11-14
e3d14ee4624be28321d098a7.challonge.comNot in the scope2026-11-14
e4n.challonge.comNot in the scope2026-11-14
e5b1e77f4721e1b587de37fa.challonge.comNot in the scope2026-11-14
e814fb782022aa015aeeb360.challonge.comNot in the scope2026-11-14
eac.challonge.comNot in the scope2026-11-14
eager.challonge.comNot in the scope2026-11-14
eagleesports.challonge.comNot in the scope2026-11-14
earthbound.challonge.comNot in the scope2026-11-14
eastcg.challonge.comNot in the scope2026-11-14
eastcoastgaming.challonge.comNot in the scope2026-11-14
eastpark.challonge.comNot in the scope2026-11-14
easyinspect.challonge.comNot in the scope2026-11-14
easynights.challonge.comNot in the scope2026-11-14
eb4bafaf4830b8ce2ab56648.challonge.comNot in the scope2026-11-14
ebattlegrounds.challonge.comNot in the scope2026-11-14
eboteleague.challonge.comNot in the scope2026-11-14
ebotrogmasters.challonge.comNot in the scope2026-11-14
ebotstarladder.challonge.comNot in the scope2026-11-14
ebs.challonge.comNot in the scope2026-11-14
eccc.challonge.comNot in the scope2026-11-14
eccc-ic.challonge.comNot in the scope2026-11-14
ecf.challonge.comNot in the scope2026-11-14
ecga.challonge.comNot in the scope2026-11-14
ecgc.challonge.comNot in the scope2026-11-14
ecgconxtl.challonge.comNot in the scope2026-11-14
echolan.challonge.comNot in the scope2026-11-14
echoleague.challonge.comNot in the scope2026-11-14
eclatlv.challonge.comNot in the scope2026-11-14
eclipsepr.challonge.comNot in the scope2026-11-14
eclipseweekly.challonge.comNot in the scope2026-11-14
ecpl.challonge.comNot in the scope2026-11-14
ecsgg.challonge.comNot in the scope2026-11-14
ectc.challonge.comNot in the scope2026-11-14
ecthelion.challonge.comNot in the scope2026-11-14

1,405 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.