Skip to content

Bug bounty program

Platform
HackerOne
Bounties
Pays
Assets in scope
86
Disclosed reports
15
Subdomains
7,102
Vendor on CyberSIXT
Logitech (26 CVEs, 0 exploited)

Most upvoted reports15

All reports
Most upvoted reports of Logitech
ReportWeaknessDisclosedBountyVotes
One Click Account takeover using Ouath CSRF bypass by adding Null byte %00 in state parameter on www.streamlabs.comAnalysed#1046630Cross-Site Request Forgery2021-01-06–99
Manipulating response leads to free access to Streamlabs PrimeAnalysed#1070510Input Validation and Logic2021-01-21–80
Stored XSS in [https://streamlabs.com/dashboard#/*goal] pagesAnalysed#1049012Cross-site Scripting2020-12-26–68
IDOR when creating App on [platform.streamlabs.com/api/v1/store/whitelist] with user_id fieldAnalysed#983070Insecure Direct Object Reference2020-11-26–61
session takeover via open protocol redirection on streamlabs.comAnalysed#1178239Open Redirect2021-09-01$20050
CSRF in changing users donation_settings [https://streamlabs.com/api/v6/viewer-portal/viewer-settings/donation_settings]Analysed#1049360Cross-Site Request Forgery2020-12-26–49
SSRF allows reading AWS EC2 metadata using "readapi" variable in Streamlabs CloudbotAnalysed#1108418Server-Side Request Forgery2021-02-24$20041
Privilege Escalation Leads to Control The Owner Access Token Which leads to control the stream [streamlabs.com]Analysed#1174527Access Control2021-04-27–38
Host Header injection in oslo.io (using X-Forwarded-For header) leading to email spoofingAnalysed#1072277Input Validation and Logic2021-01-07–37
Sensitive information disclosure to shared access user via streamlabs platform apiAnalysed#1072893Information Disclosure2021-01-20$20036

Subdomains7,102

Subdomains of Logitech
NameScopeFirst seen
hqgaming.challonge.comNot in the scope2026-11-14
hrs.challonge.comNot in the scope2026-11-14
hrtytteteey.challonge.comNot in the scope2026-11-14
hs-cafe-minsk.challonge.comNot in the scope2026-11-14
hs4.challonge.comNot in the scope2026-11-14
hscafeufa.challonge.comNot in the scope2026-11-14
hscayturnuvasi.challonge.comNot in the scope2026-11-14
hscsmashne.challonge.comNot in the scope2026-11-14
hsfamily3.challonge.comNot in the scope2026-11-14
hsg.challonge.comNot in the scope2026-11-14
hsid.challonge.comNot in the scope2026-11-14
hsks.challonge.comNot in the scope2026-11-14
hspt.challonge.comNot in the scope2026-11-14
hssmash.challonge.comNot in the scope2026-11-14
hstarleague.challonge.comNot in the scope2026-11-14
hsv.challonge.comNot in the scope2026-11-14
hswintercup.challonge.comNot in the scope2026-11-14
htc.challonge.comNot in the scope2026-11-14
htfchallenge.challonge.comNot in the scope2026-11-14
httpsstream.challonge.comNot in the scope2026-11-14
hub-test.challonge.comtestNot in the scope2026-11-14
hue23445.challonge.comNot in the scope2026-11-14
hugaming.challonge.comNot in the scope2026-11-14
huntingbros.challonge.comNot in the scope2026-11-14
hupipelaajat.challonge.comNot in the scope2026-11-14
hwcl.challonge.comNot in the scope2026-11-14
hws.challonge.comNot in the scope2026-11-14
hwt.challonge.comNot in the scope2026-11-14
hxcbattlezone.challonge.comNot in the scope2026-11-14
hxcbz4.challonge.comNot in the scope2026-11-14
hxccod.challonge.comNot in the scope2026-11-14
hxcgamestop.challonge.comNot in the scope2026-11-14
hxchalo.challonge.comNot in the scope2026-11-14
hxcletsplayexpo.challonge.comNot in the scope2026-11-14
hxcmadden.challonge.comNot in the scope2026-11-14
hxcnba2k.challonge.comNot in the scope2026-11-14
hybridhypegaming.challonge.comNot in the scope2026-11-14
hydraprogaming.challonge.comNot in the scope2026-11-14
hypecentral.challonge.comNot in the scope2026-11-14
hypego.challonge.comNot in the scope2026-11-14
hypest.challonge.comNot in the scope2026-11-14
i4u.challonge.comNot in the scope2026-11-14
iacp.challonge.comNot in the scope2026-11-14
iayacucho.challonge.comNot in the scope2026-11-14
ibelgrano.challonge.comNot in the scope2026-11-14
ibevents.challonge.comNot in the scope2026-11-14
ibl.challonge.comNot in the scope2026-11-14
ibna.challonge.comNot in the scope2026-11-14
icesanctuary.challonge.comNot in the scope2026-11-14
ichacabuco.challonge.comNot in the scope2026-11-14
ichibancon.challonge.comNot in the scope2026-11-14
ick.challonge.comNot in the scope2026-11-14
iconoclast.challonge.comNot in the scope2026-11-14
icsl.challonge.comNot in the scope2026-11-14
ictfeurope.challonge.comNot in the scope2026-11-14
idahosmash.challonge.comNot in the scope2026-11-14
idealgaming.challonge.comNot in the scope2026-11-14
idgc.challonge.comNot in the scope2026-11-14
idupuy.challonge.comNot in the scope2026-11-14
iebattlegrounds.challonge.comNot in the scope2026-11-14
iebm.challonge.comNot in the scope2026-11-14
iecl.challonge.comNot in the scope2026-11-14
iemfreeplay.challonge.comNot in the scope2026-11-14
iemgg.challonge.comNot in the scope2026-11-14
ierapetra3on3.challonge.comNot in the scope2026-11-14
iesa.challonge.comNot in the scope2026-11-14
iesl.challonge.comNot in the scope2026-11-14
iesports.challonge.comNot in the scope2026-11-14
ietf96.challonge.comNot in the scope2026-11-14
ifgc.challonge.comNot in the scope2026-11-14
igamerworld.challonge.comNot in the scope2026-11-14
ignitegaming.challonge.comNot in the scope2026-11-14
ignitegl.challonge.comNot in the scope2026-11-14
ignotiq.challonge.comNot in the scope2026-11-14
igromania.challonge.comNot in the scope2026-11-14
igt.challonge.comNot in the scope2026-11-14
igy412.challonge.comNot in the scope2026-11-14
ihni.challonge.comNot in the scope2026-11-14
iiilo.challonge.comNot in the scope2026-11-14
ijunin.challonge.comNot in the scope2026-11-14
illinirivals.challonge.comNot in the scope2026-11-14
illinoisgeek.challonge.comNot in the scope2026-11-14
illinoispvp.challonge.comNot in the scope2026-11-14
images.challonge.comNot in the scope2026-11-14
imerlo.challonge.comNot in the scope2026-11-14
impacttournament.challonge.comNot in the scope2026-11-14
impulse.challonge.comNot in the scope2026-11-14
impulseclan.challonge.comNot in the scope2026-11-14
imsc.challonge.comNot in the scope2026-11-14
inception-esports-colombia.challonge.comNot in the scope2026-11-14
inci.challonge.comNot in the scope2026-11-14
incicafe.challonge.comNot in the scope2026-11-14
indiabh.challonge.comNot in the scope2026-11-14
indianasportscorp.challonge.comNot in the scope2026-11-14
indiarpgtour.challonge.comNot in the scope2026-11-14
indie-lan.challonge.comNot in the scope2026-11-14
indieprobilliards.challonge.comNot in the scope2026-11-14
indomog.challonge.comNot in the scope2026-11-14
indsf.challonge.comNot in the scope2026-11-14
indybattlelan.challonge.comNot in the scope2026-11-14

1,405 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.