Skip to content

Bug bounty program

Platform
HackerOne
Bounties
Pays
Assets in scope
86
Disclosed reports
15
Subdomains
7,102
Vendor on CyberSIXT
Logitech (26 CVEs, 0 exploited)

Most upvoted reports15

All reports
Most upvoted reports of Logitech
ReportWeaknessDisclosedBountyVotes
One Click Account takeover using Ouath CSRF bypass by adding Null byte %00 in state parameter on www.streamlabs.comAnalysed#1046630Cross-Site Request Forgery2021-01-06–99
Manipulating response leads to free access to Streamlabs PrimeAnalysed#1070510Input Validation and Logic2021-01-21–80
Stored XSS in [https://streamlabs.com/dashboard#/*goal] pagesAnalysed#1049012Cross-site Scripting2020-12-26–68
IDOR when creating App on [platform.streamlabs.com/api/v1/store/whitelist] with user_id fieldAnalysed#983070Insecure Direct Object Reference2020-11-26–61
session takeover via open protocol redirection on streamlabs.comAnalysed#1178239Open Redirect2021-09-01$20050
CSRF in changing users donation_settings [https://streamlabs.com/api/v6/viewer-portal/viewer-settings/donation_settings]Analysed#1049360Cross-Site Request Forgery2020-12-26–49
SSRF allows reading AWS EC2 metadata using "readapi" variable in Streamlabs CloudbotAnalysed#1108418Server-Side Request Forgery2021-02-24$20041
Privilege Escalation Leads to Control The Owner Access Token Which leads to control the stream [streamlabs.com]Analysed#1174527Access Control2021-04-27–38
Host Header injection in oslo.io (using X-Forwarded-For header) leading to email spoofingAnalysed#1072277Input Validation and Logic2021-01-07–37
Sensitive information disclosure to shared access user via streamlabs platform apiAnalysed#1072893Information Disclosure2021-01-20$20036

Subdomains7,102

Subdomains of Logitech
NameScopeFirst seen
geekfestatl.challonge.comNot in the scope2026-11-14
geekingtime.challonge.comNot in the scope2026-11-14
geeksofwar.challonge.comNot in the scope2026-11-14
geekzilla.challonge.comNot in the scope2026-11-14
geelongsmash.challonge.comNot in the scope2026-11-14
gemina.challonge.comNot in the scope2026-11-14
geminix.challonge.comNot in the scope2026-11-14
genevasmash.challonge.comNot in the scope2026-11-14
genxgaming.challonge.comNot in the scope2026-11-14
georgiasmash.challonge.comNot in the scope2026-11-14
germanstreams.challonge.comNot in the scope2026-11-14
germanwarfare.challonge.comNot in the scope2026-11-14
germanyvslatvialivestreamhockey.challonge.comNot in the scope2026-11-14
getbodied.challonge.comNot in the scope2026-11-14
getmewet.challonge.comNot in the scope2026-11-14
getsomegames.challonge.comNot in the scope2026-11-14
gettocup.challonge.comNot in the scope2026-11-14
gextsg.challonge.comNot in the scope2026-11-14
gfcsmash.challonge.comNot in the scope2026-11-14
gffgfzdfdh.challonge.comNot in the scope2026-11-14
gfg.challonge.comNot in the scope2026-11-14
gflclan.challonge.comNot in the scope2026-11-14
gforcegg.challonge.comNot in the scope2026-11-14
gfusmash.challonge.comNot in the scope2026-11-14
gg-glitch.challonge.comNot in the scope2026-11-14
gg360.challonge.comNot in the scope2026-11-14
gg8.challonge.comNot in the scope2026-11-14
gga.challonge.comNot in the scope2026-11-14
ggbergen.challonge.comNot in the scope2026-11-14
ggcircuit.challonge.comNot in the scope2026-11-14
gggaming.challonge.comNot in the scope2026-11-14
ggindy.challonge.comNot in the scope2026-11-14
ggpovampire.challonge.comNot in the scope2026-11-14
ggsmonth.challonge.comNot in the scope2026-11-14
ggtester.challonge.comNot in the scope2026-11-14
ggw.challonge.comNot in the scope2026-11-14
ggwp.challonge.comNot in the scope2026-11-14
ggwptt.challonge.comNot in the scope2026-11-14
ghobo.challonge.comNot in the scope2026-11-14
ghq.challonge.comNot in the scope2026-11-14
gigabyteproleague.challonge.comNot in the scope2026-11-14
gigmasters.challonge.comNot in the scope2026-11-14
giroptic.challonge.comNot in the scope2026-11-14
gitkraken.challonge.comNot in the scope2026-11-14
gizmogamers.challonge.comNot in the scope2026-11-14
gl15.challonge.comNot in the scope2026-11-14
gl17.challonge.comNot in the scope2026-11-14
gl18.challonge.comNot in the scope2026-11-14
gl19.challonge.comNot in the scope2026-11-14
glan-cod.challonge.comNot in the scope2026-11-14
glasmash.challonge.comNot in the scope2026-11-14
glb.challonge.comNot in the scope2026-11-14
gleague.challonge.comNot in the scope2026-11-14
glhfjax.challonge.comNot in the scope2026-11-14
glizzywednesday.challonge.comNot in the scope2026-11-14
glk.challonge.comNot in the scope2026-11-14
glkcentral.challonge.comNot in the scope2026-11-14
glknational.challonge.comNot in the scope2026-11-14
glkslt16.challonge.comNot in the scope2026-11-14
glktest.challonge.comNot in the scope2026-11-14
globalasg1v1.challonge.comNot in the scope2026-11-14
globalforce.challonge.comNot in the scope2026-11-14
globalforce1.challonge.comNot in the scope2026-11-14
globalmelee.challonge.comNot in the scope2026-11-14
globalsftouriii.challonge.comNot in the scope2026-11-14
globalstrike1.challonge.comNot in the scope2026-11-14
globaluots1v1.challonge.comNot in the scope2026-11-14
globrawlhalla.challonge.comNot in the scope2026-11-14
globulfan.challonge.comNot in the scope2026-11-14
glominigolfriverside.challonge.comNot in the scope2026-11-14
glowhousegaming.challonge.comNot in the scope2026-11-14
gmusmash.challonge.comNot in the scope2026-11-14
gnb.challonge.comNot in the scope2026-11-14
gnetinternetstation.challonge.comNot in the scope2026-11-14
gnomesgarden.challonge.comNot in the scope2026-11-14
go-smash.challonge.comNot in the scope2026-11-14
goco.challonge.comNot in the scope2026-11-14
god-gaming.challonge.comNot in the scope2026-11-14
godlikegaming.challonge.comNot in the scope2026-11-14
godsgarden.challonge.comNot in the scope2026-11-14
godshammer.challonge.comNot in the scope2026-11-14
goe.challonge.comNot in the scope2026-11-14
gofd.challonge.comNot in the scope2026-11-14
gogaming.challonge.comNot in the scope2026-11-14
goharu.challonge.comNot in the scope2026-11-14
goiocommunity.challonge.comNot in the scope2026-11-14
gold-virus.challonge.comNot in the scope2026-11-14
goldenfriday.challonge.comNot in the scope2026-11-14
goldenway.challonge.comNot in the scope2026-11-14
goldssanguine.challonge.comNot in the scope2026-11-14
golfclashita.challonge.comNot in the scope2026-11-14
golfclashtournaments.challonge.comNot in the scope2026-11-14
golfklub-braunschweig.challonge.comNot in the scope2026-11-14
gon.challonge.comNot in the scope2026-11-14
gong.challonge.comNot in the scope2026-11-14
gonzyclanleague.challonge.comNot in the scope2026-11-14
goodgaminglounge.challonge.comNot in the scope2026-11-14
goons.challonge.comNot in the scope2026-11-14
gooshi.challonge.comNot in the scope2026-11-14
gopl.challonge.comNot in the scope2026-11-14

1,405 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.