Skip to content

Bug bounty program

Platform
HackerOne
Bounties
Pays
Assets in scope
86
Disclosed reports
15
Subdomains
7,102
Vendor on CyberSIXT
Logitech (26 CVEs, 0 exploited)

Most upvoted reports15

All reports
Most upvoted reports of Logitech
ReportWeaknessDisclosedBountyVotes
One Click Account takeover using Ouath CSRF bypass by adding Null byte %00 in state parameter on www.streamlabs.comAnalysed#1046630Cross-Site Request Forgery2021-01-06–99
Manipulating response leads to free access to Streamlabs PrimeAnalysed#1070510Input Validation and Logic2021-01-21–80
Stored XSS in [https://streamlabs.com/dashboard#/*goal] pagesAnalysed#1049012Cross-site Scripting2020-12-26–68
IDOR when creating App on [platform.streamlabs.com/api/v1/store/whitelist] with user_id fieldAnalysed#983070Insecure Direct Object Reference2020-11-26–61
session takeover via open protocol redirection on streamlabs.comAnalysed#1178239Open Redirect2021-09-01$20050
CSRF in changing users donation_settings [https://streamlabs.com/api/v6/viewer-portal/viewer-settings/donation_settings]Analysed#1049360Cross-Site Request Forgery2020-12-26–49
SSRF allows reading AWS EC2 metadata using "readapi" variable in Streamlabs CloudbotAnalysed#1108418Server-Side Request Forgery2021-02-24$20041
Privilege Escalation Leads to Control The Owner Access Token Which leads to control the stream [streamlabs.com]Analysed#1174527Access Control2021-04-27–38
Host Header injection in oslo.io (using X-Forwarded-For header) leading to email spoofingAnalysed#1072277Input Validation and Logic2021-01-07–37
Sensitive information disclosure to shared access user via streamlabs platform apiAnalysed#1072893Information Disclosure2021-01-20$20036

Subdomains7,102

Subdomains of Logitech
NameScopeFirst seen
abpm.challonge.comNot in the scope2026-11-14
abr.challonge.comNot in the scope2026-11-14
absolutegaming123.challonge.comNot in the scope2026-11-14
absolutegg.challonge.comNot in the scope2026-11-14
absolutegrief.challonge.comNot in the scope2026-11-14
ace.challonge.comNot in the scope2026-11-14
acehesports.challonge.comNot in the scope2026-11-14
acen2016.challonge.comNot in the scope2026-11-14
acen2017.challonge.comNot in the scope2026-11-14
acen2018.challonge.comNot in the scope2026-11-14
aceofsmash.challonge.comNot in the scope2026-11-14
aceshigh.challonge.comNot in the scope2026-11-14
acetrainerau.challonge.comNot in the scope2026-11-14
acgl.challonge.comNot in the scope2026-11-14
acj.challonge.comNot in the scope2026-11-14
aclbris14.challonge.comNot in the scope2026-11-14
aclmelb2015.challonge.comNot in the scope2026-11-14
aclsyd14.challonge.comNot in the scope2026-11-14
aclsyd2015.challonge.comNot in the scope2026-11-14
acmlan.challonge.comNot in the scope2026-11-14
acrotar.challonge.comNot in the scope2026-11-14
acsmash.challonge.comNot in the scope2026-11-14
actc.challonge.comNot in the scope2026-11-14
actsmash.challonge.comNot in the scope2026-11-14
actssmash.challonge.comNot in the scope2026-11-14
ad2cl.challonge.comNot in the scope2026-11-14
adaa.challonge.comNot in the scope2026-11-14
adaptiveesports.challonge.comNot in the scope2026-11-14
adc123.challonge.comNot in the scope2026-11-14
addict-esport.challonge.comNot in the scope2026-11-14
additionalfootballassociation.challonge.comNot in the scope2026-11-14
adequatesmash.challonge.comNot in the scope2026-11-14
adfc.challonge.comNot in the scope2026-11-14
adl.challonge.comNot in the scope2026-11-14
adlru.challonge.comNot in the scope2026-11-14
adminsng.challonge.comNot in the scope2026-11-14
adqawrar.challonge.comNot in the scope2026-11-14
ae6dc3b34ca662a6ae667bd7.challonge.comNot in the scope2026-11-14
aebank.challonge.comNot in the scope2026-11-14
aeesports.challonge.comNot in the scope2026-11-14
aeo.challonge.comNot in the scope2026-11-14
aeroux.challonge.comNot in the scope2026-11-14
aew.challonge.comNot in the scope2026-11-14
aex.challonge.comNot in the scope2026-11-14
afasda.challonge.comNot in the scope2026-11-14
afccup.challonge.comNot in the scope2026-11-14
afeb2e5ec62ab282c7c45e71.challonge.comNot in the scope2026-11-14
affinityplay.challonge.comNot in the scope2026-11-14
afk-rotterdam.challonge.comNot in the scope2026-11-14
afkgames.challonge.comNot in the scope2026-11-14
afkgg.challonge.comNot in the scope2026-11-14
afkredemption.challonge.comNot in the scope2026-11-14
afl1.challonge.comNot in the scope2026-11-14
afla.challonge.comNot in the scope2026-11-14
afrigamers.challonge.comNot in the scope2026-11-14
afterhours.challonge.comNot in the scope2026-11-14
afterlife.challonge.comNot in the scope2026-11-14
afterlifevgl.challonge.comNot in the scope2026-11-14
aftershock.challonge.comNot in the scope2026-11-14
afw.challonge.comNot in the scope2026-11-14
afwsub.challonge.comNot in the scope2026-11-14
agadirgamers.challonge.comNot in the scope2026-11-14
agencetouriste.challonge.comNot in the scope2026-11-14
ageofgeeks.challonge.comNot in the scope2026-11-14
agla.challonge.comNot in the scope2026-11-14
agnevents.challonge.comNot in the scope2026-11-14
agnostalgia.challonge.comNot in the scope2026-11-14
agon-serie.challonge.comNot in the scope2026-11-14
ags.challonge.comNot in the scope2026-11-14
ahos.challonge.comNot in the scope2026-11-14
aichesmash.challonge.comNot in the scope2026-11-14
aidelongaming.challonge.comNot in the scope2026-11-14
aigamingfgc.challonge.comNot in the scope2026-11-14
aip.challonge.comNot in the scope2026-11-14
aipn.challonge.comNot in the scope2026-11-14
airdashclub.challonge.comNot in the scope2026-11-14
airkjax-communincations.challonge.comNot in the scope2026-11-14
airwalkmedia.challonge.comNot in the scope2026-11-14
aisu.challonge.comNot in the scope2026-11-14
aiti.challonge.comNot in the scope2026-11-14
ak13.challonge.comNot in the scope2026-11-14
akagamingteam.challonge.comNot in the scope2026-11-14
akg.challonge.comNot in the scope2026-11-14
akgfc.challonge.comNot in the scope2026-11-14
akkuelectronics.challonge.comNot in the scope2026-11-14
ala.challonge.comNot in the scope2026-11-14
alacrity.challonge.comNot in the scope2026-11-14
albanime.challonge.comNot in the scope2026-11-14
albatrossx3.challonge.comNot in the scope2026-11-14
albertabeatdown.challonge.comNot in the scope2026-11-14
albertabeatdownv.challonge.comNot in the scope2026-11-14
alchimie.challonge.comNot in the scope2026-11-14
alejaja.challonge.comNot in the scope2026-11-14
alfacollusion3.challonge.comNot in the scope2026-11-14
alfacollusion5.challonge.comNot in the scope2026-11-14
algaming.challonge.comNot in the scope2026-11-14
algerie.challonge.comNot in the scope2026-11-14
alit.challonge.comNot in the scope2026-11-14
all-america-football.challonge.comNot in the scope2026-11-14
all-inspiration.challonge.comNot in the scope2026-11-14

1,405 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.