Skip to content

Bug bounty program

Platform
HackerOne
Bounties
Pays
Assets in scope
86
Disclosed reports
15
Subdomains
7,102
Vendor on CyberSIXT
Logitech (26 CVEs, 0 exploited)

Most upvoted reports15

All reports
Most upvoted reports of Logitech
ReportWeaknessDisclosedBountyVotes
One Click Account takeover using Ouath CSRF bypass by adding Null byte %00 in state parameter on www.streamlabs.comAnalysed#1046630Cross-Site Request Forgery2021-01-06–99
Manipulating response leads to free access to Streamlabs PrimeAnalysed#1070510Input Validation and Logic2021-01-21–80
Stored XSS in [https://streamlabs.com/dashboard#/*goal] pagesAnalysed#1049012Cross-site Scripting2020-12-26–68
IDOR when creating App on [platform.streamlabs.com/api/v1/store/whitelist] with user_id fieldAnalysed#983070Insecure Direct Object Reference2020-11-26–61
session takeover via open protocol redirection on streamlabs.comAnalysed#1178239Open Redirect2021-09-01$20050
CSRF in changing users donation_settings [https://streamlabs.com/api/v6/viewer-portal/viewer-settings/donation_settings]Analysed#1049360Cross-Site Request Forgery2020-12-26–49
SSRF allows reading AWS EC2 metadata using "readapi" variable in Streamlabs CloudbotAnalysed#1108418Server-Side Request Forgery2021-02-24$20041
Privilege Escalation Leads to Control The Owner Access Token Which leads to control the stream [streamlabs.com]Analysed#1174527Access Control2021-04-27–38
Host Header injection in oslo.io (using X-Forwarded-For header) leading to email spoofingAnalysed#1072277Input Validation and Logic2021-01-07–37
Sensitive information disclosure to shared access user via streamlabs platform apiAnalysed#1072893Information Disclosure2021-01-20$20036

Subdomains7,102

Subdomains of Logitech
NameScopeFirst seen
awesomenautsrumble.challonge.comNot in the scope2026-11-14
awo.challonge.comNot in the scope2026-11-14
axccelg.challonge.comNot in the scope2026-11-14
axgsmash.challonge.comNot in the scope2026-11-14
axosoft.challonge.comNot in the scope2026-11-14
axp.challonge.comNot in the scope2026-11-14
ayacuchotour.challonge.comNot in the scope2026-11-14
ayylamoroflkek.challonge.comNot in the scope2026-11-14
azazazaza.challonge.comNot in the scope2026-11-14
azki.challonge.comNot in the scope2026-11-14
azonlinefgc.challonge.comNot in the scope2026-11-14
azreth.challonge.comNot in the scope2026-11-14
aztecssmash.challonge.comNot in the scope2026-11-14
b-o-d-i-e-d.challonge.comNot in the scope2026-11-14
b2ogaming.challonge.comNot in the scope2026-11-14
b2wweekly.challonge.comNot in the scope2026-11-14
b307652d179c5630a021ca86.challonge.comNot in the scope2026-11-14
b40b951f8def3c0a187d5871.challonge.comNot in the scope2026-11-14
b4s.challonge.comNot in the scope2026-11-14
b788adf348cf7d413f027cef.challonge.comNot in the scope2026-11-14
b81833135b3a1410ba8e5b83.challonge.comNot in the scope2026-11-14
babyyshark.challonge.comNot in the scope2026-11-14
bacalhauspirit.challonge.comNot in the scope2026-11-14
bacalhauspiritfc.challonge.comNot in the scope2026-11-14
backdoorfighters.challonge.comNot in the scope2026-11-14
badcupadmin.challonge.comNot in the scope2026-11-14
badkidgaming.challonge.comNot in the scope2026-11-14
badlion.challonge.comNot in the scope2026-11-14
badoujackvslucianbutelivefight.challonge.comNot in the scope2026-11-14
bajaplayers.challonge.comNot in the scope2026-11-14
balkan.challonge.comNot in the scope2026-11-14
ballistix.challonge.comNot in the scope2026-11-14
balticgamers.challonge.comNot in the scope2026-11-14
bam.challonge.comNot in the scope2026-11-14
bananatag.challonge.comNot in the scope2026-11-14
banglagamer.challonge.comNot in the scope2026-11-14
banzaicon.challonge.comNot in the scope2026-11-14
bar.challonge.comNot in the scope2026-11-14
barcelonavsrealmadridenvivo.challonge.comNot in the scope2026-11-14
barcraftch.challonge.comNot in the scope2026-11-14
barqfox.challonge.comNot in the scope2026-11-14
basedaisk.challonge.comNot in the scope2026-11-14
baselan23.challonge.comNot in the scope2026-11-14
bashclub.challonge.comNot in the scope2026-11-14
batangasbladers.challonge.comNot in the scope2026-11-14
bathgatesnooker.challonge.comNot in the scope2026-11-14
batmud.challonge.comNot in the scope2026-11-14
battlebearswiki.challonge.comNot in the scope2026-11-14
battlebots.challonge.comNot in the scope2026-11-14
battlecup.challonge.comNot in the scope2026-11-14
battlegroundesports.challonge.comNot in the scope2026-11-14
battleroyale.challonge.comNot in the scope2026-11-14
battleworld.challonge.comNot in the scope2026-11-14
battlezonedzcomics.challonge.comNot in the scope2026-11-14
bayoen.challonge.comNot in the scope2026-11-14
bbdisc.challonge.comNot in the scope2026-11-14
bbgt.challonge.comNot in the scope2026-11-14
bbjk26.challonge.comNot in the scope2026-11-14
bbonline.challonge.comNot in the scope2026-11-14
bbout.challonge.comNot in the scope2026-11-14
bbt2.challonge.comNot in the scope2026-11-14
bbvcbdfgd.challonge.comNot in the scope2026-11-14
bcapoolhoutx.challonge.comNot in the scope2026-11-14
bcgba.challonge.comNot in the scope2026-11-14
bcgbaiom.challonge.comNot in the scope2026-11-14
bcgbastaffordshire.challonge.comNot in the scope2026-11-14
bcglba.challonge.comNot in the scope2026-11-14
bchl.challonge.comNot in the scope2026-11-14
bcon.challonge.comNot in the scope2026-11-14
bcrenegamers.challonge.comNot in the scope2026-11-14
bcs.challonge.comNot in the scope2026-11-14
bcs1.challonge.comNot in the scope2026-11-14
bcsmash.challonge.comNot in the scope2026-11-14
bct.challonge.comNot in the scope2026-11-14
bcw.challonge.comNot in the scope2026-11-14
bdgc.challonge.comNot in the scope2026-11-14
bdo-eu-events.challonge.comNot in the scope2026-11-14
beachsmash.challonge.comNot in the scope2026-11-14
bean.challonge.comNot in the scope2026-11-14
bearbrawl.challonge.comNot in the scope2026-11-14
beardclan.challonge.comNot in the scope2026-11-14
beastapac.challonge.comNot in the scope2026-11-14
beastapac-inj2.challonge.comNot in the scope2026-11-14
beastapac-mlbb.challonge.comNot in the scope2026-11-14
beastapac-sv.challonge.comNot in the scope2026-11-14
beastapac-vg.challonge.comNot in the scope2026-11-14
beastcoast.challonge.comNot in the scope2026-11-14
beastieball.challonge.comNot in the scope2026-11-14
beastleague.challonge.comNot in the scope2026-11-14
beastow.challonge.comNot in the scope2026-11-14
beastsaga.challonge.comNot in the scope2026-11-14
beastsmash.challonge.comNot in the scope2026-11-14
beastsofmadden.challonge.comNot in the scope2026-11-14
beatemuptuesdays.challonge.comNot in the scope2026-11-14
beatlynx.challonge.comNot in the scope2026-11-14
beauty10.challonge.comNot in the scope2026-11-14
becausetheinternetseries.challonge.comNot in the scope2026-11-14
bedfordbowlsleague.challonge.comNot in the scope2026-11-14
bee-1.challonge.comNot in the scope2026-11-14
beegame.challonge.comNot in the scope2026-11-14

1,405 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.