Skip to content

Bug bounty program

Platform
HackerOne
Bounties
Pays
Assets in scope
86
Disclosed reports
15
Subdomains
7,102
Vendor on CyberSIXT
Logitech (26 CVEs, 0 exploited)

Most upvoted reports15

All reports
Most upvoted reports of Logitech
ReportWeaknessDisclosedBountyVotes
One Click Account takeover using Ouath CSRF bypass by adding Null byte %00 in state parameter on www.streamlabs.comAnalysed#1046630Cross-Site Request Forgery2021-01-06–99
Manipulating response leads to free access to Streamlabs PrimeAnalysed#1070510Input Validation and Logic2021-01-21–80
Stored XSS in [https://streamlabs.com/dashboard#/*goal] pagesAnalysed#1049012Cross-site Scripting2020-12-26–68
IDOR when creating App on [platform.streamlabs.com/api/v1/store/whitelist] with user_id fieldAnalysed#983070Insecure Direct Object Reference2020-11-26–61
session takeover via open protocol redirection on streamlabs.comAnalysed#1178239Open Redirect2021-09-01$20050
CSRF in changing users donation_settings [https://streamlabs.com/api/v6/viewer-portal/viewer-settings/donation_settings]Analysed#1049360Cross-Site Request Forgery2020-12-26–49
SSRF allows reading AWS EC2 metadata using "readapi" variable in Streamlabs CloudbotAnalysed#1108418Server-Side Request Forgery2021-02-24$20041
Privilege Escalation Leads to Control The Owner Access Token Which leads to control the stream [streamlabs.com]Analysed#1174527Access Control2021-04-27–38
Host Header injection in oslo.io (using X-Forwarded-For header) leading to email spoofingAnalysed#1072277Input Validation and Logic2021-01-07–37
Sensitive information disclosure to shared access user via streamlabs platform api#1072893Information Disclosure2021-01-20$20036

Subdomains7,102

Subdomains of Logitech
NameScopeFirst seen
lebump.challonge.comNot in the scope2026-11-14
legacyevencup.challonge.comNot in the scope2026-11-14
legenda.challonge.comNot in the scope2026-11-14
legendacademy.challonge.comNot in the scope2026-11-14
legendeso.challonge.comNot in the scope2026-11-14
legendsunion.challonge.comNot in the scope2026-11-14
legendtitan.challonge.comNot in the scope2026-11-14
legendvryseries.challonge.comNot in the scope2026-11-14
legion.challonge.comNot in the scope2026-11-14
legion-td-tours.challonge.comNot in the scope2026-11-14
legionchampions.challonge.comNot in the scope2026-11-14
legionesports.challonge.comNot in the scope2026-11-14
legionesportsseries.challonge.comNot in the scope2026-11-14
legiongamergalicia.challonge.comNot in the scope2026-11-14
leicestercrew.challonge.comNot in the scope2026-11-14
lemieuxvsstevens.challonge.comNot in the scope2026-11-14
lemonlust.challonge.comNot in the scope2026-11-14
lempg.challonge.comNot in the scope2026-11-14
lenzfield1.challonge.comNot in the scope2026-11-14
leominsterbocce.challonge.comNot in the scope2026-11-14
lep.challonge.comNot in the scope2026-11-14
les.challonge.comNot in the scope2026-11-14
letsplaykw.challonge.comNot in the scope2026-11-14
level1.challonge.comNot in the scope2026-11-14
level482.challonge.comNot in the scope2026-11-14
levelup.challonge.comNot in the scope2026-11-14
levelupextralife.challonge.comNot in the scope2026-11-14
levelupmelee.challonge.comNot in the scope2026-11-14
levelupmods.challonge.comNot in the scope2026-11-14
levelupvideogames.challonge.comNot in the scope2026-11-14
lewils.challonge.comNot in the scope2026-11-14
lfc.challonge.comNot in the scope2026-11-14
lg-fyn.challonge.comNot in the scope2026-11-14
lgbnorthwest.challonge.comNot in the scope2026-11-14
lgbtqfighters.challonge.comNot in the scope2026-11-14
lgcs.challonge.comNot in the scope2026-11-14
lgnetwork.challonge.comNot in the scope2026-11-14
lgsc.challonge.comNot in the scope2026-11-14
lgsgg.challonge.comNot in the scope2026-11-14
lhailevelup.challonge.comNot in the scope2026-11-14
lhptournaments.challonge.comNot in the scope2026-11-14
lidocc.challonge.comNot in the scope2026-11-14
lifeburn.challonge.comNot in the scope2026-11-14
ligacbc.challonge.comNot in the scope2026-11-14
ligahearthstonechile.challonge.comNot in the scope2026-11-14
ligainternaciudadjardin.challonge.comNot in the scope2026-11-14
ligaout.challonge.comNot in the scope2026-11-14
ligaprl.challonge.comNot in the scope2026-11-14
ligassb.challonge.comNot in the scope2026-11-14
ligmaballs.challonge.comNot in the scope2026-11-14
ligue-ebtv.challonge.comNot in the scope2026-11-14
limasalty2018.challonge.comNot in the scope2026-11-14
limasalty3.challonge.comNot in the scope2026-11-14
limasalty4.challonge.comNot in the scope2026-11-14
limitlessmc.challonge.comNot in the scope2026-11-14
lincolnsnookerclub.challonge.comNot in the scope2026-11-14
line29.challonge.comNot in the scope2026-11-14
linewar.challonge.comNot in the scope2026-11-14
linktest3211.challonge.comNot in the scope2026-11-14
lionssmash.challonge.comNot in the scope2026-11-14
liretro.challonge.comNot in the scope2026-11-14
litesports.challonge.comNot in the scope2026-11-14
lithub.challonge.comNot in the scope2026-11-14
littleakiba.challonge.comNot in the scope2026-11-14
littleleagueinstlouis.challonge.comNot in the scope2026-11-14
littleleaugeseasons.challonge.comNot in the scope2026-11-14
littlewargame.challonge.comNot in the scope2026-11-14
livectf.challonge.comNot in the scope2026-11-14
livingstudios.challonge.comNot in the scope2026-11-14
ljskaterxvoid.challonge.comNot in the scope2026-11-14
lkjhgfdsaqwertyuiopmnbvcxz.challonge.comNot in the scope2026-11-14
lkng.challonge.comNot in the scope2026-11-14
lktournaments.challonge.comNot in the scope2026-11-14
llamathrust.challonge.comNot in the scope2026-11-14
llbaseballinstlouis10-11yo.challonge.comNot in the scope2026-11-14
llbaseballinstlouis9-10yo.challonge.comNot in the scope2026-11-14
llg.challonge.comNot in the scope2026-11-14
llt.challonge.comNot in the scope2026-11-14
lmgc-ap.challonge.comNot in the scope2026-11-14
lmgc-emea.challonge.comNot in the scope2026-11-14
lmgc-latam.challonge.comNot in the scope2026-11-14
lmgc-na.challonge.comNot in the scope2026-11-14
lmv.challonge.comNot in the scope2026-11-14
lmvpro1.challonge.comNot in the scope2026-11-14
lockdown.challonge.comNot in the scope2026-11-14
lockdownatlogsdons.challonge.comNot in the scope2026-11-14
locodiscgolf.challonge.comNot in the scope2026-11-14
lodsa.challonge.comNot in the scope2026-11-14
lodtour.challonge.comNot in the scope2026-11-14
logforward.challonge.comNot in the scope2026-11-14
logicmg.challonge.comNot in the scope2026-11-14
loginstation.challonge.comNot in the scope2026-11-14
logitechg-tw.challonge.comNot in the scope2026-11-14
logitechgde.challonge.comNot in the scope2026-11-14
logitechgfr.challonge.comNot in the scope2026-11-14
logitechgrandprix.challonge.comNot in the scope2026-11-14
logitechguk.challonge.comNot in the scope2026-11-14
lol-norge.challonge.comNot in the scope2026-11-14
lol12311.challonge.comNot in the scope2026-11-14
lolbotschafter.challonge.comNot in the scope2026-11-14

1,405 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.