Skip to content

Bug bounty program

Platform
HackerOne
Bounties
Pays
Assets in scope
86
Disclosed reports
15
Subdomains
7,102
Vendor on CyberSIXT
Logitech (26 CVEs, 0 exploited)

Most upvoted reports15

All reports
Most upvoted reports of Logitech
ReportWeaknessDisclosedBountyVotes
One Click Account takeover using Ouath CSRF bypass by adding Null byte %00 in state parameter on www.streamlabs.comAnalysed#1046630Cross-Site Request Forgery2021-01-06–99
Manipulating response leads to free access to Streamlabs PrimeAnalysed#1070510Input Validation and Logic2021-01-21–80
Stored XSS in [https://streamlabs.com/dashboard#/*goal] pagesAnalysed#1049012Cross-site Scripting2020-12-26–68
IDOR when creating App on [platform.streamlabs.com/api/v1/store/whitelist] with user_id fieldAnalysed#983070Insecure Direct Object Reference2020-11-26–61
session takeover via open protocol redirection on streamlabs.comAnalysed#1178239Open Redirect2021-09-01$20050
CSRF in changing users donation_settings [https://streamlabs.com/api/v6/viewer-portal/viewer-settings/donation_settings]Analysed#1049360Cross-Site Request Forgery2020-12-26–49
SSRF allows reading AWS EC2 metadata using "readapi" variable in Streamlabs CloudbotAnalysed#1108418Server-Side Request Forgery2021-02-24$20041
Privilege Escalation Leads to Control The Owner Access Token Which leads to control the stream [streamlabs.com]Analysed#1174527Access Control2021-04-27–38
Host Header injection in oslo.io (using X-Forwarded-For header) leading to email spoofingAnalysed#1072277Input Validation and Logic2021-01-07–37
Sensitive information disclosure to shared access user via streamlabs platform apiAnalysed#1072893Information Disclosure2021-01-20$20036

Subdomains7,102

Subdomains of Logitech
NameScopeFirst seen
knkgaming.challonge.comNot in the scope2026-11-14
knqbrawl.challonge.comNot in the scope2026-11-14
ko-tournament.challonge.comNot in the scope2026-11-14
kobalt.challonge.comNot in the scope2026-11-14
kobayash1.challonge.comNot in the scope2026-11-14
kofgccdubai.challonge.comNot in the scope2026-11-14
kog.challonge.comNot in the scope2026-11-14
kogamingnetwork.challonge.comNot in the scope2026-11-14
koic.challonge.comNot in the scope2026-11-14
kombatnetwork.challonge.comNot in the scope2026-11-14
konc.challonge.comNot in the scope2026-11-14
kontrolfreekforge.challonge.comNot in the scope2026-11-14
konvictgaminghots.challonge.comNot in the scope2026-11-14
koreansportskibergorganization.challonge.comNot in the scope2026-11-14
kosgaming.challonge.comNot in the scope2026-11-14
kosmicplasma.challonge.comNot in the scope2026-11-14
kotn3.challonge.comNot in the scope2026-11-14
kotn4.challonge.comNot in the scope2026-11-14
kotn5.challonge.comNot in the scope2026-11-14
kotn6.challonge.comNot in the scope2026-11-14
kotn7.challonge.comNot in the scope2026-11-14
kots.challonge.comNot in the scope2026-11-14
kots-wows.challonge.comNot in the scope2026-11-14
kotsnz.challonge.comNot in the scope2026-11-14
kourindou.challonge.comNot in the scope2026-11-14
kpbfgc.challonge.comNot in the scope2026-11-14
kq-sf.challonge.comNot in the scope2026-11-14
krakenvc.challonge.comNot in the scope2026-11-14
krlck2k.challonge.comNot in the scope2026-11-14
ksb-bia.challonge.comNot in the scope2026-11-14
ksdsmash.challonge.comNot in the scope2026-11-14
ksixb1.challonge.comNot in the scope2026-11-14
ksjcgamingclub.challonge.comNot in the scope2026-11-14
kskgc.challonge.comNot in the scope2026-11-14
ksmht3.challonge.comNot in the scope2026-11-14
ksmht5.challonge.comNot in the scope2026-11-14
ksmht6.challonge.comNot in the scope2026-11-14
ksmoseason6.challonge.comNot in the scope2026-11-14
kssummit.challonge.comNot in the scope2026-11-14
kstar.challonge.comNot in the scope2026-11-14
ksusmash.challonge.comNot in the scope2026-11-14
ktarxi.challonge.comNot in the scope2026-11-14
ktarxv.challonge.comNot in the scope2026-11-14
ktarxvi.challonge.comNot in the scope2026-11-14
ktarxvii.challonge.comNot in the scope2026-11-14
ktdtriangulodelcafe.challonge.comNot in the scope2026-11-14
ktk.challonge.comNot in the scope2026-11-14
kuaizero.challonge.comNot in the scope2026-11-14
kugames.challonge.comNot in the scope2026-11-14
kumite2.challonge.comNot in the scope2026-11-14
kumiteintn.challonge.comNot in the scope2026-11-14
kumoricon.challonge.comNot in the scope2026-11-14
kun.challonge.comNot in the scope2026-11-14
kunklub.challonge.comNot in the scope2026-11-14
kusocup.challonge.comNot in the scope2026-11-14
kutaweiesports.challonge.comNot in the scope2026-11-14
kutca-2016.challonge.comNot in the scope2026-11-14
kvclassicgamingclub.challonge.comNot in the scope2026-11-14
kwfireside.challonge.comNot in the scope2026-11-14
kwirk.challonge.comNot in the scope2026-11-14
kwmq.challonge.comNot in the scope2026-11-14
kxcdn.challonge.comNot in the scope2026-11-14
kyrgiosvsnadallivestreamtennisatp.challonge.comNot in the scope2026-11-14
kytaja.challonge.comNot in the scope2026-11-14
kzclimb.challonge.comNot in the scope2026-11-14
kzm-dota2.challonge.comNot in the scope2026-11-14
kzoosmash.challonge.comNot in the scope2026-11-14
l3h.challonge.comNot in the scope2026-11-14
lab.challonge.comNot in the scope2026-11-14
labzero.challonge.comNot in the scope2026-11-14
labzerogames.challonge.comNot in the scope2026-11-14
ladose.challonge.comNot in the scope2026-11-14
ladx.challonge.comNot in the scope2026-11-14
lafpc.challonge.comNot in the scope2026-11-14
laframille.challonge.comNot in the scope2026-11-14
lagattack.challonge.comNot in the scope2026-11-14
lagfighterchile.challonge.comNot in the scope2026-11-14
lagrgaming.challonge.comNot in the scope2026-11-14
lagrieta.challonge.comNot in the scope2026-11-14
lalobb.challonge.comNot in the scope2026-11-14
lamborghiniamericanchallenge.challonge.comNot in the scope2026-11-14
lanbash7.challonge.comNot in the scope2026-11-14
lanbycs.challonge.comNot in the scope2026-11-14
landiego.challonge.comNot in the scope2026-11-14
lanetechesports.challonge.comNot in the scope2026-11-14
lanetplay.challonge.comNot in the scope2026-11-14
lanfestsacramento.challonge.comNot in the scope2026-11-14
lanhammerdota2.challonge.comNot in the scope2026-11-14
lanhammermelee.challonge.comNot in the scope2026-11-14
lanops.challonge.comNot in the scope2026-11-14
lanparty-lsacbucuresti.challonge.comNot in the scope2026-11-14
lanpy.challonge.comNot in the scope2026-11-14
lanslide.challonge.comNot in the scope2026-11-14
lantran.challonge.comNot in the scope2026-11-14
laordendeloscaballeros.challonge.comNot in the scope2026-11-14
lapack.challonge.comNot in the scope2026-11-14
laparadiso.challonge.comNot in the scope2026-11-14
laredosmash4.challonge.comNot in the scope2026-11-14
larivals.challonge.comNot in the scope2026-11-14
las.challonge.comNot in the scope2026-11-14

1,405 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.