Skip to content

Bug bounty program

Platform
HackerOne
Bounties
Pays
Assets in scope
86
Disclosed reports
15
Subdomains
7,102
Vendor on CyberSIXT
Logitech (26 CVEs, 0 exploited)

Most upvoted reports15

All reports
Most upvoted reports of Logitech
ReportWeaknessDisclosedBountyVotes
One Click Account takeover using Ouath CSRF bypass by adding Null byte %00 in state parameter on www.streamlabs.comAnalysed#1046630Cross-Site Request Forgery2021-01-06–99
Manipulating response leads to free access to Streamlabs PrimeAnalysed#1070510Input Validation and Logic2021-01-21–80
Stored XSS in [https://streamlabs.com/dashboard#/*goal] pagesAnalysed#1049012Cross-site Scripting2020-12-26–68
IDOR when creating App on [platform.streamlabs.com/api/v1/store/whitelist] with user_id fieldAnalysed#983070Insecure Direct Object Reference2020-11-26–61
session takeover via open protocol redirection on streamlabs.comAnalysed#1178239Open Redirect2021-09-01$20050
CSRF in changing users donation_settings [https://streamlabs.com/api/v6/viewer-portal/viewer-settings/donation_settings]Analysed#1049360Cross-Site Request Forgery2020-12-26–49
SSRF allows reading AWS EC2 metadata using "readapi" variable in Streamlabs CloudbotAnalysed#1108418Server-Side Request Forgery2021-02-24$20041
Privilege Escalation Leads to Control The Owner Access Token Which leads to control the stream [streamlabs.com]Analysed#1174527Access Control2021-04-27–38
Host Header injection in oslo.io (using X-Forwarded-For header) leading to email spoofingAnalysed#1072277Input Validation and Logic2021-01-07–37
Sensitive information disclosure to shared access user via streamlabs platform apiAnalysed#1072893Information Disclosure2021-01-20$20036

Subdomains7,102

Subdomains of Logitech
NameScopeFirst seen
ecthrowdown.challonge.comNot in the scope2026-11-14
eczilla.challonge.comNot in the scope2026-11-14
edcesp.challonge.comNot in the scope2026-11-14
edds080517.challonge.comNot in the scope2026-11-14
edelan.challonge.comNot in the scope2026-11-14
edmmelee.challonge.comNot in the scope2026-11-14
edmontonfgc.challonge.comNot in the scope2026-11-14
edmontonufs.challonge.comNot in the scope2026-11-14
edmontonufss.challonge.comNot in the scope2026-11-14
edms4.challonge.comNot in the scope2026-11-14
edmsmashweeklies.challonge.comNot in the scope2026-11-14
edmultimate.challonge.comNot in the scope2026-11-14
ee6bc37f33bd896ae458183c.challonge.comNot in the scope2026-11-14
eeisti.challonge.comNot in the scope2026-11-14
efc.challonge.comNot in the scope2026-11-14
effervescence.challonge.comNot in the scope2026-11-14
efkonzolvilag.challonge.comNot in the scope2026-11-14
efuse.challonge.comNot in the scope2026-11-14
egamerscafe.challonge.comNot in the scope2026-11-14
egamerstw.challonge.comNot in the scope2026-11-14
ege.challonge.comNot in the scope2026-11-14
eglx.challonge.comNot in the scope2026-11-14
egmproleague.challonge.comNot in the scope2026-11-14
egx.challonge.comNot in the scope2026-11-14
eh-tours-rgc.challonge.comNot in the scope2026-11-14
ehgaming.challonge.comNot in the scope2026-11-14
ehll.challonge.comNot in the scope2026-11-14
eigs.challonge.comNot in the scope2026-11-14
eis.challonge.comNot in the scope2026-11-14
eitagiovana.challonge.comNot in the scope2026-11-14
ejousting.challonge.comNot in the scope2026-11-14
eleague2342345.challonge.comNot in the scope2026-11-14
electronicdojo.challonge.comNot in the scope2026-11-14
electronicsportsleague.challonge.comNot in the scope2026-11-14
electronicsportsnayarit.challonge.comNot in the scope2026-11-14
electronicworldconvention.challonge.comNot in the scope2026-11-14
elestrals.challonge.comNot in the scope2026-11-14
elevenvr.challonge.comNot in the scope2026-11-14
elgonlinetournement.challonge.comNot in the scope2026-11-14
elmitoselacome.challonge.comNot in the scope2026-11-14
elo.challonge.comNot in the scope2026-11-14
elodarts.challonge.comNot in the scope2026-11-14
elsu.challonge.comNot in the scope2026-11-14
elswordtv.challonge.comNot in the scope2026-11-14
eltp.challonge.comNot in the scope2026-11-14
elts.challonge.comNot in the scope2026-11-14
elymination.challonge.comNot in the scope2026-11-14
emg.challonge.comNot in the scope2026-11-14
emishealthindia.challonge.comNot in the scope2026-11-14
emls.challonge.comNot in the scope2026-11-14
emocord.challonge.comNot in the scope2026-11-14
empirehotc.challonge.comNot in the scope2026-11-14
empirequickmix.challonge.comNot in the scope2026-11-14
empirerules.challonge.comNot in the scope2026-11-14
emporiumchicago.challonge.comNot in the scope2026-11-14
empshop.challonge.comNot in the scope2026-11-14
emsc2tv.challonge.comNot in the scope2026-11-14
emsm14.challonge.comNot in the scope2026-11-14
emsm2015.challonge.comNot in the scope2026-11-14
emupartidas.challonge.comNot in the scope2026-11-14
encoreesportsusa.challonge.comNot in the scope2026-11-14
endgametv.challonge.comNot in the scope2026-11-14
endurancetournament.challonge.comNot in the scope2026-11-14
energygaming.challonge.comNot in the scope2026-11-14
energyquake.challonge.comNot in the scope2026-11-14
engage.challonge.comNot in the scope2026-11-14
englan.challonge.comNot in the scope2026-11-14
englandvsitaly.challonge.comNot in the scope2026-11-14
englandvsscotland.challonge.comNot in the scope2026-11-14
enhance.challonge.comNot in the scope2026-11-14
enigma2017.challonge.comNot in the scope2026-11-14
enklacupen.challonge.comNot in the scope2026-11-14
entjt.challonge.comNot in the scope2026-11-14
entrenperras.challonge.comNot in the scope2026-11-14
eoklosersgroup.challonge.comNot in the scope2026-11-14
eopl.challonge.comNot in the scope2026-11-14
eotcrew.challonge.comNot in the scope2026-11-14
eoy2012.challonge.comNot in the scope2026-11-14
epeengaming.challonge.comNot in the scope2026-11-14
epicentergg.challonge.comNot in the scope2026-11-14
epicgamers.challonge.comNot in the scope2026-11-14
epicgaming.challonge.comNot in the scope2026-11-14
epicgl.challonge.comNot in the scope2026-11-14
epicgp.challonge.comNot in the scope2026-11-14
epictourneys.challonge.comNot in the scope2026-11-14
epicwartime.challonge.comNot in the scope2026-11-14
epitomefights.challonge.comNot in the scope2026-11-14
eplayers.challonge.comNot in the scope2026-11-14
eplex.challonge.comNot in the scope2026-11-14
eq.challonge.comNot in the scope2026-11-14
eqlan.challonge.comNot in the scope2026-11-14
equicup.challonge.comNot in the scope2026-11-14
equinoxsmash.challonge.comNot in the scope2026-11-14
er2a.challonge.comNot in the scope2026-11-14
erath.challonge.comNot in the scope2026-11-14
eri.challonge.comNot in the scope2026-11-14
eriktest.challonge.comNot in the scope2026-11-14
esacademy.challonge.comNot in the scope2026-11-14
esalv.challonge.comNot in the scope2026-11-14
esarlington.challonge.comNot in the scope2026-11-14

1,405 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.