Skip to content

Bug bounty program

Platform
HackerOne
Bounties
Pays
Assets in scope
86
Disclosed reports
15
Subdomains
7,102
Vendor on CyberSIXT
Logitech (26 CVEs, 0 exploited)

Most upvoted reports15

All reports
Most upvoted reports of Logitech
ReportWeaknessDisclosedBountyVotes
One Click Account takeover using Ouath CSRF bypass by adding Null byte %00 in state parameter on www.streamlabs.comAnalysed#1046630Cross-Site Request Forgery2021-01-06–99
Manipulating response leads to free access to Streamlabs PrimeAnalysed#1070510Input Validation and Logic2021-01-21–80
Stored XSS in [https://streamlabs.com/dashboard#/*goal] pagesAnalysed#1049012Cross-site Scripting2020-12-26–68
IDOR when creating App on [platform.streamlabs.com/api/v1/store/whitelist] with user_id fieldAnalysed#983070Insecure Direct Object Reference2020-11-26–61
session takeover via open protocol redirection on streamlabs.comAnalysed#1178239Open Redirect2021-09-01$20050
CSRF in changing users donation_settings [https://streamlabs.com/api/v6/viewer-portal/viewer-settings/donation_settings]Analysed#1049360Cross-Site Request Forgery2020-12-26–49
SSRF allows reading AWS EC2 metadata using "readapi" variable in Streamlabs CloudbotAnalysed#1108418Server-Side Request Forgery2021-02-24$20041
Privilege Escalation Leads to Control The Owner Access Token Which leads to control the stream [streamlabs.com]Analysed#1174527Access Control2021-04-27–38
Host Header injection in oslo.io (using X-Forwarded-For header) leading to email spoofingAnalysed#1072277Input Validation and Logic2021-01-07–37
Sensitive information disclosure to shared access user via streamlabs platform apiAnalysed#1072893Information Disclosure2021-01-20$20036

Subdomains7,102

Subdomains of Logitech
NameScopeFirst seen
fa2015es.challonge.comNot in the scope2026-11-14
fableamiibo.challonge.comNot in the scope2026-11-14
facebreak.challonge.comNot in the scope2026-11-14
factoryteabar.challonge.comNot in the scope2026-11-14
fagzchallenge.challonge.comNot in the scope2026-11-14
failbot.challonge.comNot in the scope2026-11-14
fairbanks.challonge.comNot in the scope2026-11-14
fairytale.challonge.comNot in the scope2026-11-14
fakelol.challonge.comNot in the scope2026-11-14
fakesmash.challonge.comNot in the scope2026-11-14
falconarena.challonge.comNot in the scope2026-11-14
faldfasallsflsaldgldsaglsadfgdsagsdfs.challonge.comNot in the scope2026-11-14
fanboygaming.challonge.comNot in the scope2026-11-14
fantasyduel.challonge.comNot in the scope2026-11-14
fantasysnooker2016.challonge.comNot in the scope2026-11-14
fantasystrike.challonge.comNot in the scope2026-11-14
fastcupmb.challonge.comNot in the scope2026-11-14
fastforward.challonge.comNot in the scope2026-11-14
fategaming.challonge.comNot in the scope2026-11-14
fazdszdgv.challonge.comNot in the scope2026-11-14
fbmonthly.challonge.comNot in the scope2026-11-14
fc-hs.challonge.comNot in the scope2026-11-14
fcab07f2b3043ada2ee36254.challonge.comNot in the scope2026-11-14
fcc2017.challonge.comNot in the scope2026-11-14
fccf.challonge.comNot in the scope2026-11-14
fccnh.challonge.comNot in the scope2026-11-14
fcptl.challonge.comNot in the scope2026-11-14
fcptl2018.challonge.comNot in the scope2026-11-14
fcptl2019.challonge.comNot in the scope2026-11-14
fcs60.challonge.comNot in the scope2026-11-14
fcsudm.challonge.comNot in the scope2026-11-14
fdasfdsaf.challonge.comNot in the scope2026-11-14
featherswillfly.challonge.comNot in the scope2026-11-14
fedecolde.challonge.comNot in the scope2026-11-14
feedback.challonge.comNot in the scope2026-11-14
festival15.challonge.comNot in the scope2026-11-14
festo-lt.challonge.comNot in the scope2026-11-14
ff1-tct.challonge.comNot in the scope2026-11-14
ffbg.challonge.comNot in the scope2026-11-14
ffmq.challonge.comNot in the scope2026-11-14
ffpmechwarrioronline.challonge.comNot in the scope2026-11-14
fftarena.challonge.comNot in the scope2026-11-14
fftsmash.challonge.comNot in the scope2026-11-14
fg.challonge.comNot in the scope2026-11-14
fg2civilwar.challonge.comNot in the scope2026-11-14
fgc-cz.challonge.comNot in the scope2026-11-14
fgca.challonge.comNot in the scope2026-11-14
fgcsergipe.challonge.comNot in the scope2026-11-14
fgcup2.challonge.comNot in the scope2026-11-14
fggkusogeking.challonge.comNot in the scope2026-11-14
fggsfv.challonge.comNot in the scope2026-11-14
fggvo.challonge.comNot in the scope2026-11-14
fgx.challonge.comNot in the scope2026-11-14
fhu.challonge.comNot in the scope2026-11-14
fibs.challonge.comNot in the scope2026-11-14
fifa17szczecinek.challonge.comNot in the scope2026-11-14
fifadom.challonge.comNot in the scope2026-11-14
fifaperu.challonge.comNot in the scope2026-11-14
fifavnps4onlinecup.challonge.comNot in the scope2026-11-14
fight-or-flight.challonge.comNot in the scope2026-11-14
fightcade.challonge.comNot in the scope2026-11-14
fightcade2016.challonge.comNot in the scope2026-11-14
fightfortheschool.challonge.comNot in the scope2026-11-14
fightingclimaxignition.challonge.comNot in the scope2026-11-14
fightingfoenatics.challonge.comNot in the scope2026-11-14
fightinggamermeetup.challonge.comNot in the scope2026-11-14
fightlab.challonge.comNot in the scope2026-11-14
fightline.challonge.comNot in the scope2026-11-14
fightpitt5.challonge.comNot in the scope2026-11-14
fightsessions.challonge.comNot in the scope2026-11-14
fightstarchampionship9live.challonge.comNot in the scope2026-11-14
fighty.challonge.comNot in the scope2026-11-14
fimworldchampionshipmotocrossmx1andmx2liveonline.challonge.comNot in the scope2026-11-14
finaldestination.challonge.comNot in the scope2026-11-14
finalfantasytcgaustralia.challonge.comNot in the scope2026-11-14
findlayacademyll.challonge.comNot in the scope2026-11-14
fingerstofight.challonge.comNot in the scope2026-11-14
finishthatplate.challonge.comNot in the scope2026-11-14
finnegan.challonge.comNot in the scope2026-11-14
finnishsnooker.challonge.comNot in the scope2026-11-14
fireplace.challonge.comNot in the scope2026-11-14
firesidebattles.challonge.comNot in the scope2026-11-14
firstbloodnz.challonge.comNot in the scope2026-11-14
firstframe.challonge.comNot in the scope2026-11-14
fistfulofdice.challonge.comNot in the scope2026-11-14
fiveshards.challonge.comNot in the scope2026-11-14
fixofi-nydusts.challonge.comNot in the scope2026-11-14
fizbencup.challonge.comNot in the scope2026-11-14
fjellveien.challonge.comNot in the scope2026-11-14
fkao.challonge.comNot in the scope2026-11-14
fks-kursk.challonge.comNot in the scope2026-11-14
fkspskov.challonge.comNot in the scope2026-11-14
flashforeveryone.challonge.comNot in the scope2026-11-14
fleague.challonge.comNot in the scope2026-11-14
flexians.challonge.comNot in the scope2026-11-14
flightsdenver.challonge.comNot in the scope2026-11-14
flippers.challonge.comNot in the scope2026-11-14
flitedek.challonge.comNot in the scope2026-11-14
flowstategaming.challonge.comNot in the scope2026-11-14
flpolysmash.challonge.comNot in the scope2026-11-14

1,405 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.