Skip to content

Bug bounty program

Platform
HackerOne
Bounties
Pays
Assets in scope
86
Disclosed reports
15
Subdomains
7,102
Vendor on CyberSIXT
Logitech (26 CVEs, 0 exploited)

Most upvoted reports15

All reports
Most upvoted reports of Logitech
ReportWeaknessDisclosedBountyVotes
One Click Account takeover using Ouath CSRF bypass by adding Null byte %00 in state parameter on www.streamlabs.comAnalysed#1046630Cross-Site Request Forgery2021-01-06–99
Manipulating response leads to free access to Streamlabs PrimeAnalysed#1070510Input Validation and Logic2021-01-21–80
Stored XSS in [https://streamlabs.com/dashboard#/*goal] pagesAnalysed#1049012Cross-site Scripting2020-12-26–68
IDOR when creating App on [platform.streamlabs.com/api/v1/store/whitelist] with user_id fieldAnalysed#983070Insecure Direct Object Reference2020-11-26–61
session takeover via open protocol redirection on streamlabs.comAnalysed#1178239Open Redirect2021-09-01$20050
CSRF in changing users donation_settings [https://streamlabs.com/api/v6/viewer-portal/viewer-settings/donation_settings]Analysed#1049360Cross-Site Request Forgery2020-12-26–49
SSRF allows reading AWS EC2 metadata using "readapi" variable in Streamlabs CloudbotAnalysed#1108418Server-Side Request Forgery2021-02-24$20041
Privilege Escalation Leads to Control The Owner Access Token Which leads to control the stream [streamlabs.com]Analysed#1174527Access Control2021-04-27–38
Host Header injection in oslo.io (using X-Forwarded-For header) leading to email spoofingAnalysed#1072277Input Validation and Logic2021-01-07–37
Sensitive information disclosure to shared access user via streamlabs platform apiAnalysed#1072893Information Disclosure2021-01-20$20036

Subdomains7,102

Subdomains of Logitech
NameScopeFirst seen
indygamingleague.challonge.comNot in the scope2026-11-14
indysmash.challonge.comNot in the scope2026-11-14
inet.challonge.comNot in the scope2026-11-14
infinityfgc.challonge.comNot in the scope2026-11-14
infinitygamers.challonge.comNot in the scope2026-11-14
inkforce.challonge.comNot in the scope2026-11-14
inkleagues.challonge.comNot in the scope2026-11-14
inkopoliscup.challonge.comNot in the scope2026-11-14
inkorsink.challonge.comNot in the scope2026-11-14
inkwarsplatoon.challonge.comNot in the scope2026-11-14
insertgame.challonge.comNot in the scope2026-11-14
insertgamingbrasil.challonge.comNot in the scope2026-11-14
insgym.challonge.comNot in the scope2026-11-14
insomniacommunity.challonge.comNot in the scope2026-11-14
insta.challonge.comNot in the scope2026-11-14
instarcraft.challonge.comNot in the scope2026-11-14
intercolegiales-san-luis.challonge.comNot in the scope2026-11-14
internationalcup.challonge.comNot in the scope2026-11-14
internetlongmatch.challonge.comNot in the scope2026-11-14
intownatlantadiscgolfclubinc.challonge.comNot in the scope2026-11-14
invisiblewar.challonge.comNot in the scope2026-11-14
iocolympic.challonge.comNot in the scope2026-11-14
iol.challonge.comNot in the scope2026-11-14
iombowls.challonge.comNot in the scope2026-11-14
iotae.challonge.comNot in the scope2026-11-14
iovatepingpong.challonge.comNot in the scope2026-11-14
iowadarts.challonge.comNot in the scope2026-11-14
ipedernera.challonge.comNot in the scope2026-11-14
ipg.challonge.comNot in the scope2026-11-14
ipl.challonge.comNot in the scope2026-11-14
iplaycup.challonge.comNot in the scope2026-11-14
iplaygames.challonge.comNot in the scope2026-11-14
ipringles.challonge.comNot in the scope2026-11-14
ipueyrredon.challonge.comNot in the scope2026-11-14
irandotatours.challonge.comNot in the scope2026-11-14
iranrpg.challonge.comNot in the scope2026-11-14
irantours.challonge.comNot in the scope2026-11-14
irlasia.challonge.comNot in the scope2026-11-14
irnfist.challonge.comNot in the scope2026-11-14
ironcitybilliards.challonge.comNot in the scope2026-11-14
ironfist.challonge.comNot in the scope2026-11-14
ironseer.challonge.comNot in the scope2026-11-14
iroseph.challonge.comNot in the scope2026-11-14
isacord.challonge.comNot in the scope2026-11-14
isanluis.challonge.comNot in the scope2026-11-14
isanmartin.challonge.comNot in the scope2026-11-14
iscbracket.challonge.comNot in the scope2026-11-14
iseleague.challonge.comNot in the scope2026-11-14
ishtargamingnights.challonge.comNot in the scope2026-11-14
island-girl-domino-club.challonge.comNot in the scope2026-11-14
isleague.challonge.comNot in the scope2026-11-14
isnolan.challonge.comNot in the scope2026-11-14
isometrix.challonge.comNot in the scope2026-11-14
israelpetanque.challonge.comNot in the scope2026-11-14
isusmash.challonge.comNot in the scope2026-11-14
isusmashbros.challonge.comNot in the scope2026-11-14
it.challonge.comNot in the scope2026-11-14
itb.challonge.comNot in the scope2026-11-14
itcs.challonge.comNot in the scope2026-11-14
itg.challonge.comNot in the scope2026-11-14
itsalive.challonge.comNot in the scope2026-11-14
ituhs.challonge.comNot in the scope2026-11-14
ituteam.challonge.comNot in the scope2026-11-14
ivillamercedes.challonge.comNot in the scope2026-11-14
ivpa.challonge.comNot in the scope2026-11-14
ivytech.challonge.comNot in the scope2026-11-14
iwbts.challonge.comNot in the scope2026-11-14
iwplayers.challonge.comNot in the scope2026-11-14
ix.challonge.comNot in the scope2026-11-14
iyl.challonge.comNot in the scope2026-11-14
j1con.challonge.comNot in the scope2026-11-14
jabbabc.challonge.comNot in the scope2026-11-14
jabkingdom.challonge.comNot in the scope2026-11-14
jackwagon.challonge.comNot in the scope2026-11-14
jadl.challonge.comNot in the scope2026-11-14
jakasnazwa.challonge.comNot in the scope2026-11-14
jakomanonline.challonge.comNot in the scope2026-11-14
jamitgamingsc2.challonge.comNot in the scope2026-11-14
jamthewind.challonge.comNot in the scope2026-11-14
jandacup.challonge.comNot in the scope2026-11-14
javagamingcafe.challonge.comNot in the scope2026-11-14
jaxxguild.challonge.comNot in the scope2026-11-14
jcccsmashbros.challonge.comNot in the scope2026-11-14
jcsupperclub.challonge.comNot in the scope2026-11-14
jdhun.challonge.comNot in the scope2026-11-14
jerseyjapes.challonge.comNot in the scope2026-11-14
jessembly.challonge.comNot in the scope2026-11-14
jeumobi.challonge.comNot in the scope2026-11-14
jgl.challonge.comNot in the scope2026-11-14
jham.challonge.comNot in the scope2026-11-14
jhbd.challonge.comNot in the scope2026-11-14
jlan.challonge.comNot in the scope2026-11-14
jleague.challonge.comNot in the scope2026-11-14
jmantourneys.challonge.comNot in the scope2026-11-14
jnet.challonge.comNot in the scope2026-11-14
jnj.challonge.comNot in the scope2026-11-14
joedor.challonge.comNot in the scope2026-11-14
joes.challonge.comNot in the scope2026-11-14
jogatinabh360.challonge.comNot in the scope2026-11-14
join-the-fight.challonge.comNot in the scope2026-11-14

1,405 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.