Skip to content

Bug bounty program

Platform
HackerOne
Bounties
Pays
Assets in scope
86
Disclosed reports
15
Subdomains
7,102
Vendor on CyberSIXT
Logitech (26 CVEs, 0 exploited)

Most upvoted reports15

All reports
Most upvoted reports of Logitech
ReportWeaknessDisclosedBountyVotes
One Click Account takeover using Ouath CSRF bypass by adding Null byte %00 in state parameter on www.streamlabs.comAnalysed#1046630Cross-Site Request Forgery2021-01-06–99
Manipulating response leads to free access to Streamlabs PrimeAnalysed#1070510Input Validation and Logic2021-01-21–80
Stored XSS in [https://streamlabs.com/dashboard#/*goal] pagesAnalysed#1049012Cross-site Scripting2020-12-26–68
IDOR when creating App on [platform.streamlabs.com/api/v1/store/whitelist] with user_id fieldAnalysed#983070Insecure Direct Object Reference2020-11-26–61
session takeover via open protocol redirection on streamlabs.comAnalysed#1178239Open Redirect2021-09-01$20050
CSRF in changing users donation_settings [https://streamlabs.com/api/v6/viewer-portal/viewer-settings/donation_settings]Analysed#1049360Cross-Site Request Forgery2020-12-26–49
SSRF allows reading AWS EC2 metadata using "readapi" variable in Streamlabs CloudbotAnalysed#1108418Server-Side Request Forgery2021-02-24$20041
Privilege Escalation Leads to Control The Owner Access Token Which leads to control the stream [streamlabs.com]Analysed#1174527Access Control2021-04-27–38
Host Header injection in oslo.io (using X-Forwarded-For header) leading to email spoofingAnalysed#1072277Input Validation and Logic2021-01-07–37
Sensitive information disclosure to shared access user via streamlabs platform apiAnalysed#1072893Information Disclosure2021-01-20$20036

Subdomains7,102

Subdomains of Logitech
NameScopeFirst seen
gamblersmash.challonge.comNot in the scope2026-11-14
game-inn.challonge.comNot in the scope2026-11-14
game5.challonge.comNot in the scope2026-11-14
game5smash.challonge.comNot in the scope2026-11-14
gameclucks.challonge.comNot in the scope2026-11-14
gamecrave.challonge.comNot in the scope2026-11-14
gamedata.challonge.comNot in the scope2026-11-14
gameekstra.challonge.comNot in the scope2026-11-14
gamegalaxyweeklies.challonge.comNot in the scope2026-11-14
gamegang.challonge.comNot in the scope2026-11-14
gameguys.challonge.comNot in the scope2026-11-14
gamekeller.challonge.comNot in the scope2026-11-14
gameknight.challonge.comNot in the scope2026-11-14
gameoverevents.challonge.comNot in the scope2026-11-14
gameparkzgz.challonge.comNot in the scope2026-11-14
gameplan.challonge.comNot in the scope2026-11-14
gamepolis2k17.challonge.comNot in the scope2026-11-14
gamepolis2k18.challonge.comNot in the scope2026-11-14
gamer-connect.challonge.comNot in the scope2026-11-14
gamer-unidos.challonge.comNot in the scope2026-11-14
gamerarena.challonge.comNot in the scope2026-11-14
gamerecognizegame.challonge.comNot in the scope2026-11-14
gamerenaissance.challonge.comNot in the scope2026-11-14
gamergy3smash.challonge.comNot in the scope2026-11-14
gamerlan.challonge.comNot in the scope2026-11-14
gamerlk.challonge.comNot in the scope2026-11-14
gameroompub.challonge.comNot in the scope2026-11-14
gameroos.challonge.comNot in the scope2026-11-14
gamerphiles.challonge.comNot in the scope2026-11-14
gamersabbey.challonge.comNot in the scope2026-11-14
gamersgames.challonge.comNot in the scope2026-11-14
gamersleague.challonge.comNot in the scope2026-11-14
gamerslegion.challonge.comNot in the scope2026-11-14
gamersloungeeg.challonge.comNot in the scope2026-11-14
gamersontheedge.challonge.comNot in the scope2026-11-14
gamersspot.challonge.comNot in the scope2026-11-14
gamerth.challonge.comNot in the scope2026-11-14
gamerz.challonge.comNot in the scope2026-11-14
gamerzgalaxy.challonge.comNot in the scope2026-11-14
games-oh.challonge.comNot in the scope2026-11-14
games2d4.challonge.comNot in the scope2026-11-14
gamescoast.challonge.comNot in the scope2026-11-14
gameslines.challonge.comNot in the scope2026-11-14
gamespaces.challonge.comNot in the scope2026-11-14
gamestah.challonge.comNot in the scope2026-11-14
gamestartasia.challonge.comNot in the scope2026-11-14
gamesters.challonge.comNot in the scope2026-11-14
gametimect.challonge.comNot in the scope2026-11-14
gametotal.challonge.comNot in the scope2026-11-14
gametyrantsmash.challonge.comNot in the scope2026-11-14
gameunderground.challonge.comNot in the scope2026-11-14
gameworks.challonge.comNot in the scope2026-11-14
gameworksseattle.challonge.comNot in the scope2026-11-14
gamezaion.challonge.comNot in the scope2026-11-14
gamfed.challonge.comNot in the scope2026-11-14
gamingdojo.challonge.comNot in the scope2026-11-14
gamingrelam.challonge.comNot in the scope2026-11-14
gamingtroop.challonge.comNot in the scope2026-11-14
gamingwithcartee.challonge.comNot in the scope2026-11-14
gamingwithgreg.challonge.comNot in the scope2026-11-14
gangwars.challonge.comNot in the scope2026-11-14
ganongauntlet.challonge.comNot in the scope2026-11-14
garage.challonge.comNot in the scope2026-11-14
gardenofmight.challonge.comNot in the scope2026-11-14
gariathleagueops.challonge.comNot in the scope2026-11-14
garr.challonge.comNot in the scope2026-11-14
garrobos03.challonge.comNot in the scope2026-11-14
garrobos033.challonge.comNot in the scope2026-11-14
garryswars.challonge.comNot in the scope2026-11-14
garysmellsyalater.challonge.comNot in the scope2026-11-14
gatcg-utah.challonge.comNot in the scope2026-11-14
gatecitysmash.challonge.comNot in the scope2026-11-14
gatewaysummoners.challonge.comNot in the scope2026-11-14
gathering4magic-draft-league.challonge.comNot in the scope2026-11-14
gatorgaming.challonge.comNot in the scope2026-11-14
gatpres.challonge.comNot in the scope2026-11-14
gaulan.challonge.comNot in the scope2026-11-14
gauntletsc2.challonge.comNot in the scope2026-11-14
gbpcgh.challonge.comNot in the scope2026-11-14
gbrqw.challonge.comNot in the scope2026-11-14
gcarcade.challonge.comNot in the scope2026-11-14
gcc.challonge.comNot in the scope2026-11-14
gccmajors.challonge.comNot in the scope2026-11-14
gccmmx2018.challonge.comNot in the scope2026-11-14
gcg.challonge.comNot in the scope2026-11-14
gci.challonge.comNot in the scope2026-11-14
gcm.challonge.comNot in the scope2026-11-14
gcnmyanmar.challonge.comNot in the scope2026-11-14
gcpm.challonge.comNot in the scope2026-11-14
gcs.challonge.comNot in the scope2026-11-14
gcsptournaments.challonge.comNot in the scope2026-11-14
gcvoyagers.challonge.comNot in the scope2026-11-14
gcwpmod420.challonge.comNot in the scope2026-11-14
gd.challonge.comNot in the scope2026-11-14
gdc-2k17.challonge.comNot in the scope2026-11-14
gdl-oax.challonge.comNot in the scope2026-11-14
gdlez.challonge.comNot in the scope2026-11-14
gearboxsoftware.challonge.comNot in the scope2026-11-14
gearsofwar.challonge.comNot in the scope2026-11-14
gecosports.challonge.comNot in the scope2026-11-14

1,405 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.