Skip to content

Bug bounty program

Platform
HackerOne
Bounties
Pays
Assets in scope
86
Disclosed reports
15
Subdomains
7,102
Vendor on CyberSIXT
Logitech (26 CVEs, 0 exploited)

Most upvoted reports15

All reports
Most upvoted reports of Logitech
ReportWeaknessDisclosedBountyVotes
One Click Account takeover using Ouath CSRF bypass by adding Null byte %00 in state parameter on www.streamlabs.comAnalysed#1046630Cross-Site Request Forgery2021-01-06–99
Manipulating response leads to free access to Streamlabs PrimeAnalysed#1070510Input Validation and Logic2021-01-21–80
Stored XSS in [https://streamlabs.com/dashboard#/*goal] pagesAnalysed#1049012Cross-site Scripting2020-12-26–68
IDOR when creating App on [platform.streamlabs.com/api/v1/store/whitelist] with user_id fieldAnalysed#983070Insecure Direct Object Reference2020-11-26–61
session takeover via open protocol redirection on streamlabs.comAnalysed#1178239Open Redirect2021-09-01$20050
CSRF in changing users donation_settings [https://streamlabs.com/api/v6/viewer-portal/viewer-settings/donation_settings]Analysed#1049360Cross-Site Request Forgery2020-12-26–49
SSRF allows reading AWS EC2 metadata using "readapi" variable in Streamlabs CloudbotAnalysed#1108418Server-Side Request Forgery2021-02-24$20041
Privilege Escalation Leads to Control The Owner Access Token Which leads to control the stream [streamlabs.com]Analysed#1174527Access Control2021-04-27–38
Host Header injection in oslo.io (using X-Forwarded-For header) leading to email spoofingAnalysed#1072277Input Validation and Logic2021-01-07–37
Sensitive information disclosure to shared access user via streamlabs platform apiAnalysed#1072893Information Disclosure2021-01-20$20036

Subdomains7,102

Subdomains of Logitech
NameScopeFirst seen
450.challonge.comNot in the scope2026-11-14
456torneo123.challonge.comNot in the scope2026-11-14
46hhf.challonge.comNot in the scope2026-11-14
47a4a2f13ccf158d8c30b87c.challonge.comNot in the scope2026-11-14
4869c6477dd2327835e5f4d8.challonge.comNot in the scope2026-11-14
4e4d44980ec1ca5a0e4277bc.challonge.comNot in the scope2026-11-14
4el.challonge.comNot in the scope2026-11-14
4evo.challonge.comNot in the scope2026-11-14
4game.challonge.comNot in the scope2026-11-14
4glte.challonge.comNot in the scope2026-11-14
4greatbeavers.challonge.comNot in the scope2026-11-14
4greatjustice.challonge.comNot in the scope2026-11-14
4otaku.challonge.comNot in the scope2026-11-14
4qs.challonge.comNot in the scope2026-11-14
4sthlm.challonge.comNot in the scope2026-11-14
4v4sundaes.challonge.comNot in the scope2026-11-14
515dgl.challonge.comNot in the scope2026-11-14
51thmassilia.challonge.comNot in the scope2026-11-14
53c4fb31a580cf1c78de0388.challonge.comNot in the scope2026-11-14
542523423qeqw.challonge.comNot in the scope2026-11-14
55434.challonge.comNot in the scope2026-11-14
564bdf134690b2e3a78c8d8a.challonge.comNot in the scope2026-11-14
58ce13f8b7b1c1be0915bfb5.challonge.comNot in the scope2026-11-14
5a0988120d5aafea27e808a7.challonge.comNot in the scope2026-11-14
5dsyugiohcards.challonge.comNot in the scope2026-11-14
5eplay.challonge.comNot in the scope2026-11-14
5f8342797358c4d0457d6b.challonge.comNot in the scope2026-11-14
5kgaming.challonge.comNot in the scope2026-11-14
600.challonge.comNot in the scope2026-11-14
613smash.challonge.comNot in the scope2026-11-14
62fc0f9034a3f805b846dbc5.challonge.comNot in the scope2026-11-14
63b172e8800ca08efd9b1c15.challonge.comNot in the scope2026-11-14
641ecd41adf8a0344963ac96.challonge.comNot in the scope2026-11-14
6434dac282463469ecd6b3c9.challonge.comNot in the scope2026-11-14
65twenty.challonge.comNot in the scope2026-11-14
66694f0b66cda64bbb434f5a.challonge.comNot in the scope2026-11-14
694a7419a76c099b39bed18d.challonge.comNot in the scope2026-11-14
6ac2b36b8041dbe9deea0681.challonge.comNot in the scope2026-11-14
6ebd43cd4b7070dbd02c3d17.challonge.comNot in the scope2026-11-14
6ee5a4f436b74b91d74d3abc.challonge.comNot in the scope2026-11-14
6ee727bebe03a785b6cb58ca.challonge.comNot in the scope2026-11-14
6gcups.challonge.comNot in the scope2026-11-14
6nationslive.challonge.comNot in the scope2026-11-14
716smash.challonge.comNot in the scope2026-11-14
71c3c76bae82e8addef8538e.challonge.comNot in the scope2026-11-14
7d656a3653403b169b1e0fd9.challonge.comNot in the scope2026-11-14
7ea693e02bf1d9ab92b9d190.challonge.comNot in the scope2026-11-14
7gg.challonge.comNot in the scope2026-11-14
7thasianjunior.challonge.comNot in the scope2026-11-14
805836ea56355a5cb96ac881.challonge.comNot in the scope2026-11-14
80smadness.challonge.comNot in the scope2026-11-14
81b07fd34a101afc28bd4857.challonge.comNot in the scope2026-11-14
831ssb.challonge.comNot in the scope2026-11-14
83af1d3d09cd30ec2db3d85d.challonge.comNot in the scope2026-11-14
84c92375bf5fc2ff29c5cabe.challonge.comNot in the scope2026-11-14
85459db8975be03e8f04f306.challonge.comNot in the scope2026-11-14
855d122dc9878973be34a2a7.challonge.comNot in the scope2026-11-14
88888888.challonge.comNot in the scope2026-11-14
89thacademyawardslivestreamoscar2017.challonge.comNot in the scope2026-11-14
8andy5.challonge.comNot in the scope2026-11-14
8bit.challonge.comNot in the scope2026-11-14
8bitheartsstudio.challonge.comNot in the scope2026-11-14
8bitheartstudio.challonge.comNot in the scope2026-11-14
8eebc68ed6a63fc5d56cd8cf.challonge.comNot in the scope2026-11-14
8wayrun.challonge.comNot in the scope2026-11-14
907gamers.challonge.comNot in the scope2026-11-14
9125e10a0f29bfcbc4348426.challonge.comNot in the scope2026-11-14
91d510368cb4170cd5ac3776.challonge.comNot in the scope2026-11-14
983f5e3c3af9ae0c3d8b6ebe.challonge.comNot in the scope2026-11-14
98be4e3020b474bcc211dceb.challonge.comNot in the scope2026-11-14
9a9924d2fc249adf12369f46.challonge.comNot in the scope2026-11-14
9b83134883608f212519dd86.challonge.comNot in the scope2026-11-14
9c16169b8eca46159e0ca250.challonge.comNot in the scope2026-11-14
9dbc562a486f2c1ef8ca8f76.challonge.comNot in the scope2026-11-14
a-teamcoc.challonge.comNot in the scope2026-11-14
a374d14d8f61a0e5ec7fa546.challonge.comNot in the scope2026-11-14
a3d58a77baa9acb3e90082d8.challonge.comNot in the scope2026-11-14
a4conditioning.challonge.comNot in the scope2026-11-14
a9.challonge.comNot in the scope2026-11-14
a9b8661b601ffb32b0c351c5.challonge.comNot in the scope2026-11-14
aa07280df1c9032c354858ef.challonge.comNot in the scope2026-11-14
aaaasssss.challonge.comNot in the scope2026-11-14
aaaguild.challonge.comNot in the scope2026-11-14
aacdarts.challonge.comNot in the scope2026-11-14
aactive.challonge.comNot in the scope2026-11-14
aaesports.challonge.comNot in the scope2026-11-14
aasl.challonge.comNot in the scope2026-11-14
aaslsc2.challonge.comNot in the scope2026-11-14
aaulan.challonge.comNot in the scope2026-11-14
ab7.challonge.comNot in the scope2026-11-14
abarc2.challonge.comNot in the scope2026-11-14
abarc3.challonge.comNot in the scope2026-11-14
abarcadian.challonge.comNot in the scope2026-11-14
abasmash.challonge.comNot in the scope2026-11-14
abd2017.challonge.comNot in the scope2026-11-14
abellan.challonge.comNot in the scope2026-11-14
aberdeenpairsleague.challonge.comNot in the scope2026-11-14
ablegamers.challonge.comNot in the scope2026-11-14
aboland.challonge.comNot in the scope2026-11-14
aboland2013.challonge.comNot in the scope2026-11-14

1,405 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.