Skip to content

Bug bounty program

Platform
HackerOne
Bounties
Pays
Assets in scope
86
Disclosed reports
15
Subdomains
7,102
Vendor on CyberSIXT
Logitech (26 CVEs, 0 exploited)

Most upvoted reports15

All reports
Most upvoted reports of Logitech
ReportWeaknessDisclosedBountyVotes
One Click Account takeover using Ouath CSRF bypass by adding Null byte %00 in state parameter on www.streamlabs.comAnalysed#1046630Cross-Site Request Forgery2021-01-06–99
Manipulating response leads to free access to Streamlabs PrimeAnalysed#1070510Input Validation and Logic2021-01-21–80
Stored XSS in [https://streamlabs.com/dashboard#/*goal] pagesAnalysed#1049012Cross-site Scripting2020-12-26–68
IDOR when creating App on [platform.streamlabs.com/api/v1/store/whitelist] with user_id fieldAnalysed#983070Insecure Direct Object Reference2020-11-26–61
session takeover via open protocol redirection on streamlabs.comAnalysed#1178239Open Redirect2021-09-01$20050
CSRF in changing users donation_settings [https://streamlabs.com/api/v6/viewer-portal/viewer-settings/donation_settings]Analysed#1049360Cross-Site Request Forgery2020-12-26–49
SSRF allows reading AWS EC2 metadata using "readapi" variable in Streamlabs CloudbotAnalysed#1108418Server-Side Request Forgery2021-02-24$20041
Privilege Escalation Leads to Control The Owner Access Token Which leads to control the stream [streamlabs.com]Analysed#1174527Access Control2021-04-27–38
Host Header injection in oslo.io (using X-Forwarded-For header) leading to email spoofingAnalysed#1072277Input Validation and Logic2021-01-07–37
Sensitive information disclosure to shared access user via streamlabs platform apiAnalysed#1072893Information Disclosure2021-01-20$20036

Subdomains7,102

Subdomains of Logitech
NameScopeFirst seen
gostadium.challonge.comNot in the scope2026-11-14
gotermina.challonge.comNot in the scope2026-11-14
gotradegames.challonge.comNot in the scope2026-11-14
gouki.challonge.comNot in the scope2026-11-14
gp-tips.challonge.comNot in the scope2026-11-14
gpivdeogames.challonge.comNot in the scope2026-11-14
gpl1337.challonge.comNot in the scope2026-11-14
gplgg.challonge.comNot in the scope2026-11-14
gr.challonge.comNot in the scope2026-11-14
gr16.challonge.comNot in the scope2026-11-14
gradi.challonge.comNot in the scope2026-11-14
graffhamtennis.challonge.comNot in the scope2026-11-14
graffinity.challonge.comNot in the scope2026-11-14
granboard.challonge.comNot in the scope2026-11-14
grandslamsmash.challonge.comNot in the scope2026-11-14
greaterbostonarena.challonge.comNot in the scope2026-11-14
greaterthangreatdebate.challonge.comNot in the scope2026-11-14
greathan.challonge.comNot in the scope2026-11-14
greatnbateameva.challonge.comNot in the scope2026-11-14
greatvaluesmash.challonge.comNot in the scope2026-11-14
grecca.challonge.comNot in the scope2026-11-14
green-team.challonge.comNot in the scope2026-11-14
greennugget.challonge.comNot in the scope2026-11-14
greentourney.challonge.comNot in the scope2026-11-14
greenvillell10-12yo.challonge.comNot in the scope2026-11-14
greenvillell8-10yo.challonge.comNot in the scope2026-11-14
greenvillell9-11yo.challonge.comNot in the scope2026-11-14
greenwichll.challonge.comNot in the scope2026-11-14
greygoocommunity.challonge.comNot in the scope2026-11-14
grimpath.challonge.comNot in the scope2026-11-14
grindbreakgaming.challonge.comNot in the scope2026-11-14
grizzlytournaments.challonge.comNot in the scope2026-11-14
grm.challonge.comNot in the scope2026-11-14
grover.challonge.comNot in the scope2026-11-14
grownassmen.challonge.comNot in the scope2026-11-14
growupesports.challonge.comNot in the scope2026-11-14
grupotripleerre.challonge.comNot in the scope2026-11-14
gsa.challonge.comNot in the scope2026-11-14
gsfc.challonge.comNot in the scope2026-11-14
gsl15pm.challonge.comNot in the scope2026-11-14
gslam.challonge.comNot in the scope2026-11-14
gsls1pm2018.challonge.comNot in the scope2026-11-14
gsls2.challonge.comNot in the scope2026-11-14
gsls2am.challonge.comNot in the scope2026-11-14
gsls3am2017.challonge.comNot in the scope2026-11-14
gsls3am2018.challonge.comNot in the scope2026-11-14
gsls3pm2017.challonge.comNot in the scope2026-11-14
gslstpm.challonge.comNot in the scope2026-11-14
gsq.challonge.comNot in the scope2026-11-14
gss.challonge.comNot in the scope2026-11-14
gstournies.challonge.comNot in the scope2026-11-14
gta5.challonge.comNot in the scope2026-11-14
gtastunting.challonge.comNot in the scope2026-11-14
gtgamefest.challonge.comNot in the scope2026-11-14
gtsa.challonge.comNot in the scope2026-11-14
guamfgc.challonge.comNot in the scope2026-11-14
guamleague.challonge.comNot in the scope2026-11-14
guardbreaker.challonge.comNot in the scope2026-11-14
guarimbacup.challonge.comNot in the scope2026-11-14
guildhallcluj.challonge.comNot in the scope2026-11-14
guildwarspvplegends.challonge.comNot in the scope2026-11-14
guiltygear.challonge.comNot in the scope2026-11-14
guiltygeartas.challonge.comNot in the scope2026-11-14
gum.challonge.comNot in the scope2026-11-14
gunnars.challonge.comNot in the scope2026-11-14
gvevil.challonge.comNot in the scope2026-11-14
gw2pvpcorp.challonge.comNot in the scope2026-11-14
gwa.challonge.comNot in the scope2026-11-14
gwb-a11daya11night.challonge.comNot in the scope2026-11-14
gwden.challonge.comNot in the scope2026-11-14
gwentarena.challonge.comNot in the scope2026-11-14
gwentleague.challonge.comNot in the scope2026-11-14
gwentlemen.challonge.comNot in the scope2026-11-14
gwesports.challonge.comNot in the scope2026-11-14
gxl.challonge.comNot in the scope2026-11-14
gzteam-winzbro.challonge.comNot in the scope2026-11-14
gzugg.challonge.comNot in the scope2026-11-14
h1z1league.challonge.comNot in the scope2026-11-14
habce.challonge.comNot in the scope2026-11-14
hachiojill.challonge.comNot in the scope2026-11-14
hackaholics.challonge.comNot in the scope2026-11-14
hackerfight.challonge.comNot in the scope2026-11-14
hairymuppet.challonge.comNot in the scope2026-11-14
hakadal.challonge.comNot in the scope2026-11-14
hakensann.challonge.comNot in the scope2026-11-14
halcyon-affinity.challonge.comNot in the scope2026-11-14
hallowedfantasy.challonge.comNot in the scope2026-11-14
halocerevived.challonge.comNot in the scope2026-11-14
hamburgsmash.challonge.comNot in the scope2026-11-14
hamiltonfgc.challonge.comNot in the scope2026-11-14
handsofmybread.challonge.comNot in the scope2026-11-14
handsomejacksarena.challonge.comNot in the scope2026-11-14
hanger19.challonge.comNot in the scope2026-11-14
hardandeasy.challonge.comNot in the scope2026-11-14
hardcorekbr.challonge.comNot in the scope2026-11-14
hardcourtitalia.challonge.comNot in the scope2026-11-14
hardreadsgaming.challonge.comNot in the scope2026-11-14
harkerfoosball.challonge.comNot in the scope2026-11-14
harkonnenclan.challonge.comNot in the scope2026-11-14
harveynormansg.challonge.comNot in the scope2026-11-14

1,405 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.