Skip to content

Bug bounty program

Platform
HackerOne
Bounties
Pays
Assets in scope
86
Disclosed reports
15
Subdomains
7,102
Vendor on CyberSIXT
Logitech (26 CVEs, 0 exploited)

Most upvoted reports15

All reports
Most upvoted reports of Logitech
ReportWeaknessDisclosedBountyVotes
One Click Account takeover using Ouath CSRF bypass by adding Null byte %00 in state parameter on www.streamlabs.comAnalysed#1046630Cross-Site Request Forgery2021-01-06–99
Manipulating response leads to free access to Streamlabs PrimeAnalysed#1070510Input Validation and Logic2021-01-21–80
Stored XSS in [https://streamlabs.com/dashboard#/*goal] pagesAnalysed#1049012Cross-site Scripting2020-12-26–68
IDOR when creating App on [platform.streamlabs.com/api/v1/store/whitelist] with user_id fieldAnalysed#983070Insecure Direct Object Reference2020-11-26–61
session takeover via open protocol redirection on streamlabs.comAnalysed#1178239Open Redirect2021-09-01$20050
CSRF in changing users donation_settings [https://streamlabs.com/api/v6/viewer-portal/viewer-settings/donation_settings]Analysed#1049360Cross-Site Request Forgery2020-12-26–49
SSRF allows reading AWS EC2 metadata using "readapi" variable in Streamlabs CloudbotAnalysed#1108418Server-Side Request Forgery2021-02-24$20041
Privilege Escalation Leads to Control The Owner Access Token Which leads to control the stream [streamlabs.com]Analysed#1174527Access Control2021-04-27–38
Host Header injection in oslo.io (using X-Forwarded-For header) leading to email spoofingAnalysed#1072277Input Validation and Logic2021-01-07–37
Sensitive information disclosure to shared access user via streamlabs platform apiAnalysed#1072893Information Disclosure2021-01-20$20036

Subdomains7,102

Subdomains of Logitech
NameScopeFirst seen
logi-stage-64.logitech.comstagingIn scope2026-11-14
logi-stg.logitech.comstagingIn scope2026-11-14
logiappstore.logitech.comIn scope2026-11-14
logias2.logitech.comIn scope2026-11-14
logias2-test.logitech.comtestIn scope2026-11-14
logilife.logitech.comIn scope2026-11-14
login.logitech.comauthIn scope2026-11-14
www.login.logitech.comauthIn scope2026-11-14
logistart.logitech.comIn scope2026-11-14
www.logistart.logitech.comIn scope2026-11-14
logitechstore.logitech.comIn scope2026-11-14
lsearch.logitech.comIn scope2026-11-14
m.logitech.comIn scope2026-11-14
mail.logitech.commailIn scope2026-11-14
mail2.logitech.commailIn scope2026-11-14
mail4.logitech.commailIn scope2026-11-14
mail5.logitech.commailIn scope2026-11-14
mail6.logitech.commailIn scope2026-11-14
marketing.logitech.comIn scope2026-11-14
marketplace.logitech.comIn scope2026-11-14
meeting.logitech.comIn scope2026-11-14
click.messaging.logitech.comIn scope2026-11-14
cloud.messaging.logitech.comIn scope2026-11-14
image.messaging.logitech.comIn scope2026-11-14
mta.messaging.logitech.comIn scope2026-11-14
view.messaging.logitech.comIn scope2026-11-14
mobile.logitech.comIn scope2026-11-14
mobile-gaming.logitech.comIn scope2026-11-14
mobilevideo.logitech.comIn scope2026-11-14
mr.logitech.comIn scope2026-11-14
mr-eu.logitech.comIn scope2026-11-14
ar.mxseries.logitech.comIn scope2026-11-14
news.logitech.comIn scope2026-11-14
www.news.logitech.comIn scope2026-11-14
newsletter.logitech.comIn scope2026-11-14
newsletter2.logitech.comIn scope2026-11-14
nl.logitech.comIn scope2026-11-14
nm230.logitech.comIn scope2026-11-14
nm231.logitech.comIn scope2026-11-14
nm232.logitech.comIn scope2026-11-14
nm233.logitech.comIn scope2026-11-14
nm234.logitech.comIn scope2026-11-14
nm235.logitech.comIn scope2026-11-14
nm236.logitech.comIn scope2026-11-14
nm237.logitech.comIn scope2026-11-14
nm238.logitech.comIn scope2026-11-14
nm239.logitech.comIn scope2026-11-14
nm240.logitech.comIn scope2026-11-14
ns-1.logitech.comIn scope2026-11-14
ns-2.logitech.comIn scope2026-11-14
oag.logitech.comIn scope2026-11-14
offer-service.logitech.comIn scope2026-11-14
offer-service-assets.logitech.comIn scope2026-11-14
office.logitech.comIn scope2026-11-14
opensearch-logs.logitech.commonitoringIn scope2026-11-14
opensource.logitech.comIn scope2026-11-14
ops.logitech.comIn scope2026-11-14
ops-manager.logitech.comadminIn scope2026-11-14
optionsbackup.logitech.comIn scope2026-11-14
dev.optionsbackup.logitech.comdevIn scope2026-11-14
dev-1.optionsbackup.logitech.comdevIn scope2026-11-14
dev-2.optionsbackup.logitech.comdevIn scope2026-11-14
dev-a.optionsbackup.logitech.comdevIn scope2026-11-14
prod.optionsbackup.logitech.comIn scope2026-11-14
prod-blue.optionsbackup.logitech.comIn scope2026-11-14
prod-green.optionsbackup.logitech.comIn scope2026-11-14
stg.optionsbackup.logitech.comstagingIn scope2026-11-14
tbp.optionsbackup.logitech.comIn scope2026-11-14
origin.logitech.comIn scope2026-11-14
origin-files.logitech.comdataIn scope2026-11-14
origin-gaming.logitech.comIn scope2026-11-14
origin-saitek.logitech.comIn scope2026-11-14
origin-saitek2.logitech.comIn scope2026-11-14
origin2.logitech.comIn scope2026-11-14
originaem-gaming.logitech.comIn scope2026-11-14
otmprod.logitech.comIn scope2026-11-14
outage.logitech.comIn scope2026-11-14
oversight.logitech.comIn scope2026-11-14
pages.logitech.comIn scope2026-11-14
partner.logitech.comIn scope2026-11-14
app.partner.logitech.comIn scope2026-11-14
edit.partner.logitech.comIn scope2026-11-14
media.partner.logitech.comIn scope2026-11-14
partnernews.logitech.comIn scope2026-11-14
partnerpreprod.logitech.comIn scope2026-11-14
app.partnerpreprod.logitech.comIn scope2026-11-14
edit.partnerpreprod.logitech.comIn scope2026-11-14
media.partnerpreprod.logitech.comIn scope2026-11-14
partnerqa.logitech.comIn scope2026-11-14
app.partnerqa.logitech.comIn scope2026-11-14
edit.partnerqa.logitech.comIn scope2026-11-14
media.partnerqa.logitech.comIn scope2026-11-14
partners.logitech.comIn scope2026-11-14
password.logitech.comIn scope2026-11-14
pilot.logitech.comIn scope2026-11-14
plantuml.logitech.comIn scope2026-11-14
play.logitech.comIn scope2026-11-14
playground.logitech.comIn scope2026-11-14
plmprod.logitech.comIn scope2026-11-14
plmsync.logitech.comIn scope2026-11-14

1,405 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.