Skip to content

Bug bounty program

Platform
HackerOne
Bounties
Pays
Assets in scope
86
Disclosed reports
15
Subdomains
7,102
Vendor on CyberSIXT
Logitech (26 CVEs, 0 exploited)

Most upvoted reports15

All reports
Most upvoted reports of Logitech
ReportWeaknessDisclosedBountyVotes
One Click Account takeover using Ouath CSRF bypass by adding Null byte %00 in state parameter on www.streamlabs.comAnalysed#1046630Cross-Site Request Forgery2021-01-06–99
Manipulating response leads to free access to Streamlabs PrimeAnalysed#1070510Input Validation and Logic2021-01-21–80
Stored XSS in [https://streamlabs.com/dashboard#/*goal] pagesAnalysed#1049012Cross-site Scripting2020-12-26–68
IDOR when creating App on [platform.streamlabs.com/api/v1/store/whitelist] with user_id fieldAnalysed#983070Insecure Direct Object Reference2020-11-26–61
session takeover via open protocol redirection on streamlabs.comAnalysed#1178239Open Redirect2021-09-01$20050
CSRF in changing users donation_settings [https://streamlabs.com/api/v6/viewer-portal/viewer-settings/donation_settings]Analysed#1049360Cross-Site Request Forgery2020-12-26–49
SSRF allows reading AWS EC2 metadata using "readapi" variable in Streamlabs CloudbotAnalysed#1108418Server-Side Request Forgery2021-02-24$20041
Privilege Escalation Leads to Control The Owner Access Token Which leads to control the stream [streamlabs.com]Analysed#1174527Access Control2021-04-27–38
Host Header injection in oslo.io (using X-Forwarded-For header) leading to email spoofingAnalysed#1072277Input Validation and Logic2021-01-07–37
Sensitive information disclosure to shared access user via streamlabs platform api#1072893Information Disclosure2021-01-20$20036

Subdomains7,102

Subdomains of Logitech
NameScopeFirst seen
lolfantasyleague.challonge.comNot in the scope2026-11-14
lolisrael.challonge.comNot in the scope2026-11-14
lollise.challonge.comNot in the scope2026-11-14
lolnorge.challonge.comNot in the scope2026-11-14
lololl.challonge.comNot in the scope2026-11-14
lolpit2.challonge.comNot in the scope2026-11-14
loltvscl.challonge.comNot in the scope2026-11-14
londonea.challonge.comNot in the scope2026-11-14
loolish.challonge.comNot in the scope2026-11-14
lopap.challonge.comNot in the scope2026-11-14
lordsengarde.challonge.comNot in the scope2026-11-14
lots.challonge.comNot in the scope2026-11-14
loudounlittleleagues12-14yo.challonge.comNot in the scope2026-11-14
lounge.challonge.comNot in the scope2026-11-14
love123.challonge.comNot in the scope2026-11-14
lowlifesofgranboard.challonge.comNot in the scope2026-11-14
lowtierlegends.challonge.comNot in the scope2026-11-14
loyolatournamentdartsclub.challonge.comNot in the scope2026-11-14
lpi.challonge.comNot in the scope2026-11-14
lplesports.challonge.comNot in the scope2026-11-14
lqt.challonge.comNot in the scope2026-11-14
lrastart.challonge.comNot in the scope2026-11-14
lrol.challonge.comNot in the scope2026-11-14
lrss.challonge.comNot in the scope2026-11-14
lsc2018guangzhou.challonge.comNot in the scope2026-11-14
lsthavengers.challonge.comNot in the scope2026-11-14
lsu.challonge.comNot in the scope2026-11-14
lta.challonge.comNot in the scope2026-11-14
ltc-kostelec.challonge.comNot in the scope2026-11-14
ltc3.challonge.comNot in the scope2026-11-14
lth.challonge.comNot in the scope2026-11-14
ltk.challonge.comNot in the scope2026-11-14
lucone1973.challonge.comNot in the scope2026-11-14
ludendi.challonge.comNot in the scope2026-11-14
lufkinll10-12yo.challonge.comNot in the scope2026-11-14
lunagamingmx.challonge.comNot in the scope2026-11-14
lupusstaff.challonge.comNot in the scope2026-11-14
lupusturbae.challonge.comNot in the scope2026-11-14
luti.challonge.comNot in the scope2026-11-14
luxtourneys.challonge.comNot in the scope2026-11-14
luxurygaming.challonge.comNot in the scope2026-11-14
lvbloodsport.challonge.comNot in the scope2026-11-14
lvfgc2015.challonge.comNot in the scope2026-11-14
lvfgc2016.challonge.comNot in the scope2026-11-14
lvfgc2017.challonge.comNot in the scope2026-11-14
lvfgc2018.challonge.comNot in the scope2026-11-14
lvfgc2019.challonge.comNot in the scope2026-11-14
lvlupexpo.challonge.comNot in the scope2026-11-14
lvlupgg.challonge.comNot in the scope2026-11-14
lvpguate.challonge.comNot in the scope2026-11-14
lwj.challonge.comNot in the scope2026-11-14
lwp420.challonge.comNot in the scope2026-11-14
lynchburg.challonge.comNot in the scope2026-11-14
lynchburgultimate.challonge.comNot in the scope2026-11-14
lyndhurstdadsclub.challonge.comNot in the scope2026-11-14
m3talsm8sh0r3g0n.challonge.comNot in the scope2026-11-14
macabeadas.challonge.comNot in the scope2026-11-14
mach-3-esports.challonge.comNot in the scope2026-11-14
macomb-esports-association.challonge.comNot in the scope2026-11-14
madamada.challonge.comNot in the scope2026-11-14
madcave.challonge.comNot in the scope2026-11-14
madcup.challonge.comNot in the scope2026-11-14
madeinbrasil.challonge.comNot in the scope2026-11-14
madgaming.challonge.comNot in the scope2026-11-14
madisonfgc.challonge.comNot in the scope2026-11-14
madmangames.challonge.comNot in the scope2026-11-14
madridbikepolo.challonge.comNot in the scope2026-11-14
madskills.challonge.comNot in the scope2026-11-14
madsmash.challonge.comNot in the scope2026-11-14
maelstrom.challonge.comNot in the scope2026-11-14
magichomes.challonge.comNot in the scope2026-11-14
magicleague.challonge.comNot in the scope2026-11-14
magination.challonge.comNot in the scope2026-11-14
majjus.challonge.comNot in the scope2026-11-14
maliigraci.challonge.comNot in the scope2026-11-14
mammothgamers.challonge.comNot in the scope2026-11-14
mandiant.challonge.comNot in the scope2026-11-14
mandrill.challonge.comNot in the scope2026-11-14
manilacup.challonge.comNot in the scope2026-11-14
manitoba.challonge.comNot in the scope2026-11-14
maracup.challonge.comNot in the scope2026-11-14
maracupdota.challonge.comNot in the scope2026-11-14
mariohockey.challonge.comNot in the scope2026-11-14
mariokark.challonge.comNot in the scope2026-11-14
mariokart100subs.challonge.comNot in the scope2026-11-14
mariokartwiki.challonge.comNot in the scope2026-11-14
mariotennisopen.challonge.comNot in the scope2026-11-14
maskednetwork.challonge.comNot in the scope2026-11-14
maskwars.challonge.comNot in the scope2026-11-14
masterarena.challonge.comNot in the scope2026-11-14
mastercupruta1.challonge.comNot in the scope2026-11-14
mastergz.challonge.comNot in the scope2026-11-14
mastersgolf.challonge.comNot in the scope2026-11-14
mastersteve.challonge.comNot in the scope2026-11-14
matador-gaming.challonge.comNot in the scope2026-11-14
matchgaming.challonge.comNot in the scope2026-11-14
matcsmash.challonge.comNot in the scope2026-11-14
mausaga.challonge.comNot in the scope2026-11-14
mavik.challonge.comNot in the scope2026-11-14
maxdamage.challonge.comNot in the scope2026-11-14

1,405 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.