Skip to content

Bug bounty program

Platform
HackerOne
Bounties
Pays
Assets in scope
86
Disclosed reports
15
Subdomains
7,102
Vendor on CyberSIXT
Logitech (26 CVEs, 0 exploited)

Most upvoted reports15

All reports
Most upvoted reports of Logitech
ReportWeaknessDisclosedBountyVotes
One Click Account takeover using Ouath CSRF bypass by adding Null byte %00 in state parameter on www.streamlabs.comAnalysed#1046630Cross-Site Request Forgery2021-01-06–99
Manipulating response leads to free access to Streamlabs PrimeAnalysed#1070510Input Validation and Logic2021-01-21–80
Stored XSS in [https://streamlabs.com/dashboard#/*goal] pagesAnalysed#1049012Cross-site Scripting2020-12-26–68
IDOR when creating App on [platform.streamlabs.com/api/v1/store/whitelist] with user_id fieldAnalysed#983070Insecure Direct Object Reference2020-11-26–61
session takeover via open protocol redirection on streamlabs.comAnalysed#1178239Open Redirect2021-09-01$20050
CSRF in changing users donation_settings [https://streamlabs.com/api/v6/viewer-portal/viewer-settings/donation_settings]Analysed#1049360Cross-Site Request Forgery2020-12-26–49
SSRF allows reading AWS EC2 metadata using "readapi" variable in Streamlabs CloudbotAnalysed#1108418Server-Side Request Forgery2021-02-24$20041
Privilege Escalation Leads to Control The Owner Access Token Which leads to control the stream [streamlabs.com]Analysed#1174527Access Control2021-04-27–38
Host Header injection in oslo.io (using X-Forwarded-For header) leading to email spoofingAnalysed#1072277Input Validation and Logic2021-01-07–37
Sensitive information disclosure to shared access user via streamlabs platform apiAnalysed#1072893Information Disclosure2021-01-20$20036

Subdomains7,102

Subdomains of Logitech
NameScopeFirst seen
beisbols.challonge.comNot in the scope2026-11-14
belen.challonge.comNot in the scope2026-11-14
belongarenadrafts.challonge.comNot in the scope2026-11-14
benga.challonge.comNot in the scope2026-11-14
benqzowiefr.challonge.comNot in the scope2026-11-14
beograd202.challonge.comNot in the scope2026-11-14
beraosvc.challonge.comNot in the scope2026-11-14
berlinesports.challonge.comNot in the scope2026-11-14
berusky.challonge.comNot in the scope2026-11-14
bestoss.challonge.comNot in the scope2026-11-14
betalan10.challonge.comNot in the scope2026-11-14
betalan11.challonge.comNot in the scope2026-11-14
betalan12.challonge.comNot in the scope2026-11-14
betalan13.challonge.comNot in the scope2026-11-14
betalan14.challonge.comNot in the scope2026-11-14
betalan15.challonge.comNot in the scope2026-11-14
betalan16.challonge.comNot in the scope2026-11-14
betalan6.challonge.comNot in the scope2026-11-14
betalan7.challonge.comNot in the scope2026-11-14
betalan8.challonge.comNot in the scope2026-11-14
betalan9.challonge.comNot in the scope2026-11-14
betauia.challonge.comNot in the scope2026-11-14
bethel.challonge.comNot in the scope2026-11-14
betteridgechallenge.challonge.comNot in the scope2026-11-14
beyond.challonge.comNot in the scope2026-11-14
beyondgodlike.challonge.comNot in the scope2026-11-14
bfcup.challonge.comNot in the scope2026-11-14
bfdi.challonge.comNot in the scope2026-11-14
bfg.challonge.comNot in the scope2026-11-14
bfgc.challonge.comNot in the scope2026-11-14
bfl.challonge.comNot in the scope2026-11-14
bfn.challonge.comNot in the scope2026-11-14
bfnations.challonge.comNot in the scope2026-11-14
bftm.challonge.comNot in the scope2026-11-14
bgba-pingpong.challonge.comNot in the scope2026-11-14
bgquali.challonge.comNot in the scope2026-11-14
bhfightclub.challonge.comNot in the scope2026-11-14
bi.challonge.comNot in the scope2026-11-14
bibliogames.challonge.comNot in the scope2026-11-14
big-5.challonge.comNot in the scope2026-11-14
bigapplesmash.challonge.comNot in the scope2026-11-14
bigbluees.challonge.comNot in the scope2026-11-14
bigegaming.challonge.comNot in the scope2026-11-14
bigfinishssf2.challonge.comNot in the scope2026-11-14
bighouseprojectm.challonge.comNot in the scope2026-11-14
bigsattourny.challonge.comNot in the scope2026-11-14
bigtimewarriors.challonge.comNot in the scope2026-11-14
biiruken.challonge.comNot in the scope2026-11-14
bikepolo_beneligue.challonge.comNot in the scope2026-11-14
bikepoloszeged.challonge.comNot in the scope2026-11-14
biljardligan.challonge.comNot in the scope2026-11-14
bilkentesports.challonge.comNot in the scope2026-11-14
billiardbattles.challonge.comNot in the scope2026-11-14
binathp.challonge.comNot in the scope2026-11-14
bisfighters.challonge.comNot in the scope2026-11-14
bitc.challonge.comNot in the scope2026-11-14
bitelit.challonge.comNot in the scope2026-11-14
bitg.challonge.comNot in the scope2026-11-14
bithack.challonge.comNot in the scope2026-11-14
bjsmashbros.challonge.comNot in the scope2026-11-14
bko.challonge.comNot in the scope2026-11-14
bkt.challonge.comNot in the scope2026-11-14
blacer.challonge.comNot in the scope2026-11-14
blacknight.challonge.comNot in the scope2026-11-14
blackpanters.challonge.comNot in the scope2026-11-14
blackplasmagaming.challonge.comNot in the scope2026-11-14
blackwidowcompany.challonge.comNot in the scope2026-11-14
blackwolfsmashbros.challonge.comNot in the scope2026-11-14
blakegames.challonge.comNot in the scope2026-11-14
blan.challonge.comNot in the scope2026-11-14
blancshl.challonge.comNot in the scope2026-11-14
blazblueeuopenreborn.challonge.comNot in the scope2026-11-14
blazinator.challonge.comNot in the scope2026-11-14
blecknspoon.challonge.comNot in the scope2026-11-14
blf2015.challonge.comNot in the scope2026-11-14
blgaming.challonge.comNot in the scope2026-11-14
blindeyestudio.challonge.comNot in the scope2026-11-14
blizzardzhtw.challonge.comNot in the scope2026-11-14
blizzheroessea.challonge.comNot in the scope2026-11-14
blizzone.challonge.comNot in the scope2026-11-14
blkflg.challonge.comNot in the scope2026-11-14
blockhouse.challonge.comNot in the scope2026-11-14
bloodfieldsgermany.challonge.comNot in the scope2026-11-14
bloodsportlv.challonge.comNot in the scope2026-11-14
bloodtyrants.challonge.comNot in the scope2026-11-14
bloomusmash.challonge.comNot in the scope2026-11-14
bluedevilsmash.challonge.comNot in the scope2026-11-14
bluedragon.challonge.comNot in the scope2026-11-14
bluefish.challonge.comNot in the scope2026-11-14
bluejacketsvssabreslivestreamnhl.challonge.comNot in the scope2026-11-14
bluelightlobby.challonge.comNot in the scope2026-11-14
blueshell.challonge.comNot in the scope2026-11-14
bluflameevents.challonge.comNot in the scope2026-11-14
bmanonymous.challonge.comNot in the scope2026-11-14
bmcguild.challonge.comNot in the scope2026-11-14
bmj.challonge.comNot in the scope2026-11-14
bml.challonge.comNot in the scope2026-11-14
bmlan.challonge.comNot in the scope2026-11-14
bmwbilliards.challonge.comNot in the scope2026-11-14
bmwbilliards2016.challonge.comNot in the scope2026-11-14

1,405 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.