Skip to content

Bug bounty program

Platform
HackerOne
Bounties
Pays
Assets in scope
86
Disclosed reports
15
Subdomains
7,102
Vendor on CyberSIXT
Logitech (26 CVEs, 0 exploited)

Most upvoted reports15

All reports
Most upvoted reports of Logitech
ReportWeaknessDisclosedBountyVotes
One Click Account takeover using Ouath CSRF bypass by adding Null byte %00 in state parameter on www.streamlabs.comAnalysed#1046630Cross-Site Request Forgery2021-01-06–99
Manipulating response leads to free access to Streamlabs PrimeAnalysed#1070510Input Validation and Logic2021-01-21–80
Stored XSS in [https://streamlabs.com/dashboard#/*goal] pagesAnalysed#1049012Cross-site Scripting2020-12-26–68
IDOR when creating App on [platform.streamlabs.com/api/v1/store/whitelist] with user_id fieldAnalysed#983070Insecure Direct Object Reference2020-11-26–61
session takeover via open protocol redirection on streamlabs.comAnalysed#1178239Open Redirect2021-09-01$20050
CSRF in changing users donation_settings [https://streamlabs.com/api/v6/viewer-portal/viewer-settings/donation_settings]Analysed#1049360Cross-Site Request Forgery2020-12-26–49
SSRF allows reading AWS EC2 metadata using "readapi" variable in Streamlabs CloudbotAnalysed#1108418Server-Side Request Forgery2021-02-24$20041
Privilege Escalation Leads to Control The Owner Access Token Which leads to control the stream [streamlabs.com]Analysed#1174527Access Control2021-04-27–38
Host Header injection in oslo.io (using X-Forwarded-For header) leading to email spoofingAnalysed#1072277Input Validation and Logic2021-01-07–37
Sensitive information disclosure to shared access user via streamlabs platform apiAnalysed#1072893Information Disclosure2021-01-20$20036

Subdomains7,102

Subdomains of Logitech
NameScopeFirst seen
dev.astrogaming.comdevNot in the scope2026-11-14
dev01.astrogaming.comdevNot in the scope2026-11-14
dev02.astrogaming.comdevNot in the scope2026-11-14
dev03.astrogaming.comdevNot in the scope2026-11-14
dev04.astrogaming.comdevNot in the scope2026-11-14
dev05.astrogaming.comdevNot in the scope2026-11-14
dev06.astrogaming.comdevNot in the scope2026-11-14
dev07.astrogaming.comdevNot in the scope2026-11-14
dev08.astrogaming.comdevNot in the scope2026-11-14
dev09.astrogaming.comdevNot in the scope2026-11-14
dev10.astrogaming.comdevNot in the scope2026-11-14
development.astrogaming.comdevNot in the scope2026-11-14
curly-dev-community.challonge.comdevNot in the scope2026-11-14
dev.jaybirdsport.comdevNot in the scope2026-11-14
dev.lu.logi.comdevIn scope2026-11-14
dev.acs.logi.comdevIn scope2026-11-14
dev.cto.logi.comdevIn scope2026-11-14
apim-dev.logi.comdevIn scope2026-11-14
dev.drawr.logi.comdevIn scope2026-11-14
dev-new.acs.logi.comdevIn scope2026-11-14
dev.bird.cto.logi.comdevIn scope2026-11-14
argo.dev.mlops.logi.comci, devIn scope2026-11-14
dev1.dev3.tune.logi.comdevIn scope2026-11-14
hybrid.dev.cto.logi.comdevIn scope2026-11-14
malmo.dev3.tune.logi.comdevIn scope2026-11-14
mimir.dev.mlops.logi.comdevIn scope2026-11-14
sqs-api.dev.cto.logi.comapi, devIn scope2026-11-14
zenml-dev.mlops.logi.comdevIn scope2026-11-14
mirror.dev.mlops.logi.comdevIn scope2026-11-14
dagster-dev.mlops.logi.comdevIn scope2026-11-14
devops1.dev3.tune.logi.comdevIn scope2026-11-14
devsync.dev3.tune.logi.comdevIn scope2026-11-14
grafana.dev.mlops.logi.comdev, monitoringIn scope2026-11-14
mirror-dev1.mlops.logi.comdevIn scope2026-11-14
prefect-dev.mlops.logi.comdevIn scope2026-11-14
signage.dev3.tune.logi.comdevIn scope2026-11-14
skypilot-dev.mlops.logi.comdevIn scope2026-11-14
skypilot.dev.mlops.logi.comdevIn scope2026-11-14
dev.public.bird.cto.logi.comdevIn scope2026-11-14
mimir-dev.dev.mlops.logi.comdevIn scope2026-11-14
public.dev.bird.cto.logi.comdevIn scope2026-11-14
skypilot-dev.ml.cto.logi.comdevIn scope2026-11-14
grafana-dev.dev.mlops.logi.comdev, monitoringIn scope2026-11-14
cybersec-dev.a-sec.cto.logi.comdevIn scope2026-11-14
speech-quality.dev.cto.logi.comdevIn scope2026-11-14
sqs-api-staging.dev.cto.logi.comapi, dev, stagingIn scope2026-11-14
sqs-api-production.dev.cto.logi.comapi, devIn scope2026-11-14
sqs-api-experimental.dev.cto.logi.comapi, devIn scope2026-11-14
dev.vc.logitech.comdevIn scope2026-11-14
ue-dev.logitech.comdevIn scope2026-11-14
dev-int.logitech.comdevIn scope2026-11-14
dev2.vc.logitech.comdevIn scope2026-11-14
dev3.vc.logitech.comdevIn scope2026-11-14
dev.blog.logitech.comdevIn scope2026-11-14
logi-dev.logitech.comdevIn scope2026-11-14
prism-dev.logitech.comdevIn scope2026-11-14
drs.dev.vc.logitech.comdevIn scope2026-11-14
gaming-dev.logitech.comdevIn scope2026-11-14
search-dev.logitech.comdevIn scope2026-11-14
dev-support.logitech.comdevIn scope2026-11-14
zeus.dev.vc.logitech.comdevIn scope2026-11-14
commerce-dev.logitech.comdevIn scope2026-11-14
dev.sherlock.logitech.comdevIn scope2026-11-14
prajith.dev.vc.logitech.comdevIn scope2026-11-14
dev.smarthabits.logitech.comdevIn scope2026-11-14
quicklook.dev.vc.logitech.comdevIn scope2026-11-14
dev.optionsbackup.logitech.comdevIn scope2026-11-14
strix-dev1.dev3.vc.logitech.comdevIn scope2026-11-14
wss-dev-api.dev.vc.logitech.comapi, devIn scope2026-11-14
dev-1.optionsbackup.logitech.comdevIn scope2026-11-14
dev-2.optionsbackup.logitech.comdevIn scope2026-11-14
dev-a.optionsbackup.logitech.comdevIn scope2026-11-14
wss-dev1-api.dev.vc.logitech.comapi, devIn scope2026-11-14
wss-stable-api.dev.vc.logitech.comapi, devIn scope2026-11-14
wss-sandbox-api.dev.vc.logitech.comapi, dev, testIn scope2026-11-14
prajith.turnstile.dev.vc.logitech.comdevIn scope2026-11-14
turnstile-prajith.dev.vc.logitech.comdevIn scope2026-11-14
iot.eu-west-3.raiden.dev.vc.logitech.comdevIn scope2026-11-14
iot.us-east-1.raiden.dev.vc.logitech.comdevIn scope2026-11-14
iot.us-west-2.raiden.dev.vc.logitech.comdevIn scope2026-11-14
raidenmcp-cdegruchy.dev3.vc.logitech.comdevIn scope2026-11-14
iot.eu-west-3.raiden.dev3.vc.logitech.comdevIn scope2026-11-14
iot.us-west-2.raiden.dev3.vc.logitech.comdevIn scope2026-11-14
wss-dev-api.dev.configurator.logitech.comapi, devIn scope2026-11-14
iot.ca-central-1.raiden.dev.vc.logitech.comdevIn scope2026-11-14
iot.eu-central-1.raiden.dev.vc.logitech.comdevIn scope2026-11-14
iot.ca-central-1.raiden.dev3.vc.logitech.comdevIn scope2026-11-14
iot.eu-central-1.raiden.dev2.vc.logitech.comdevIn scope2026-11-14
iot.eu-central-1.raiden.dev3.vc.logitech.comdevIn scope2026-11-14
collabos-device-management.dev.vc.logitech.comadmin, devIn scope2026-11-14
workspace-studio-dev.dev.configurator.logitech.comdevIn scope2026-11-14
workspace-designer-bnguyen.dev.configurator.logitech.comdevIn scope2026-11-14
workspace-designer-rmaniraj.dev.configurator.logitech.comdevIn scope2026-11-14
workspace-designer-lrajendran.dev.configurator.logitech.comdevIn scope2026-11-14
workspace-designer-pravichandran.dev.configurator.logitech.comdevIn scope2026-11-14
dev-id.logitech.com.cndevNot in the scope2026-11-14
dev-amp.logitech.com.cndevNot in the scope2026-11-14
www.dev-amp.logitech.com.cndevNot in the scope2026-11-14
dev-id.static.logitech.com.cndevNot in the scope2026-11-14
www.google.com-94e3ff-machine-machine-honors-engine.dev.logitech.com.cndevNot in the scope2026-11-14

1,405 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.