Skip to content

Bug bounty program

Platform
HackerOne
Bounties
Pays
Assets in scope
86
Disclosed reports
15
Subdomains
7,102
Vendor on CyberSIXT
Logitech (26 CVEs, 0 exploited)

Most upvoted reports15

All reports
Most upvoted reports of Logitech
ReportWeaknessDisclosedBountyVotes
One Click Account takeover using Ouath CSRF bypass by adding Null byte %00 in state parameter on www.streamlabs.comAnalysed#1046630Cross-Site Request Forgery2021-01-06–99
Manipulating response leads to free access to Streamlabs PrimeAnalysed#1070510Input Validation and Logic2021-01-21–80
Stored XSS in [https://streamlabs.com/dashboard#/*goal] pagesAnalysed#1049012Cross-site Scripting2020-12-26–68
IDOR when creating App on [platform.streamlabs.com/api/v1/store/whitelist] with user_id fieldAnalysed#983070Insecure Direct Object Reference2020-11-26–61
session takeover via open protocol redirection on streamlabs.comAnalysed#1178239Open Redirect2021-09-01$20050
CSRF in changing users donation_settings [https://streamlabs.com/api/v6/viewer-portal/viewer-settings/donation_settings]Analysed#1049360Cross-Site Request Forgery2020-12-26–49
SSRF allows reading AWS EC2 metadata using "readapi" variable in Streamlabs CloudbotAnalysed#1108418Server-Side Request Forgery2021-02-24$20041
Privilege Escalation Leads to Control The Owner Access Token Which leads to control the stream [streamlabs.com]Analysed#1174527Access Control2021-04-27–38
Host Header injection in oslo.io (using X-Forwarded-For header) leading to email spoofingAnalysed#1072277Input Validation and Logic2021-01-07–37
Sensitive information disclosure to shared access user via streamlabs platform api#1072893Information Disclosure2021-01-20$20036

Subdomains7,102

Subdomains of Logitech
NameScopeFirst seen
maxout.challonge.comNot in the scope2026-11-14
maxowaatv.challonge.comNot in the scope2026-11-14
maxteam.challonge.comNot in the scope2026-11-14
mayhems-diamond-blitz.challonge.comNot in the scope2026-11-14
mazanza8.challonge.comNot in the scope2026-11-14
mba.challonge.comNot in the scope2026-11-14
mbrunners.challonge.comNot in the scope2026-11-14
mcintyre.challonge.comNot in the scope2026-11-14
mcrumbles.challonge.comNot in the scope2026-11-14
mctpokemine.challonge.comNot in the scope2026-11-14
mdb.challonge.comNot in the scope2026-11-14
mdchialeah.challonge.comNot in the scope2026-11-14
mdm4.challonge.comNot in the scope2026-11-14
mdodarts.challonge.comNot in the scope2026-11-14
mds.challonge.comNot in the scope2026-11-14
meaxfightclub.challonge.comNot in the scope2026-11-14
mechagsplays.challonge.comNot in the scope2026-11-14
mechmadness.challonge.comNot in the scope2026-11-14
medieval-chaos-academy.challonge.comNot in the scope2026-11-14
medievaltv.challonge.comNot in the scope2026-11-14
meetup.challonge.comNot in the scope2026-11-14
meetupgaming.challonge.comNot in the scope2026-11-14
megaman11.challonge.comNot in the scope2026-11-14
megamashers.challonge.comNot in the scope2026-11-14
megarena.challonge.comNot in the scope2026-11-14
megatorneo1561561.challonge.comNot in the scope2026-11-14
mehsvgclub.challonge.comNot in the scope2026-11-14
melbournemelee.challonge.comNot in the scope2026-11-14
melbourneseahawksll.challonge.comNot in the scope2026-11-14
melee-endurance-tourneys.challonge.comNot in the scope2026-11-14
meleedojo.challonge.comNot in the scope2026-11-14
meleedown.challonge.comNot in the scope2026-11-14
meleeeveryday.challonge.comNot in the scope2026-11-14
meleehell.challonge.comNot in the scope2026-11-14
meleepr2018.challonge.comNot in the scope2026-11-14
meleestunfest2016.challonge.comNot in the scope2026-11-14
meltdownlondon.challonge.comNot in the scope2026-11-14
memphisbawsebattles.challonge.comNot in the scope2026-11-14
memphissmash.challonge.comNot in the scope2026-11-14
meonlyplz.challonge.comNot in the scope2026-11-14
mercenariosggs.challonge.comNot in the scope2026-11-14
mercenaryglobal.challonge.comNot in the scope2026-11-14
merciless-team.challonge.comNot in the scope2026-11-14
meridianll.challonge.comNot in the scope2026-11-14
messtival.challonge.comNot in the scope2026-11-14
mesummit.challonge.comNot in the scope2026-11-14
metagame.challonge.comNot in the scope2026-11-14
metagamingtv.challonge.comNot in the scope2026-11-14
metanights.challonge.comNot in the scope2026-11-14
metaops.challonge.comNot in the scope2026-11-14
metazoo.challonge.comNot in the scope2026-11-14
metroid-fusion.challonge.comNot in the scope2026-11-14
metroidprime.challonge.comNot in the scope2026-11-14
metropolistournaments.challonge.comNot in the scope2026-11-14
metropoolleague.challonge.comNot in the scope2026-11-14
metrosports.challonge.comNot in the scope2026-11-14
metuesports.challonge.comNot in the scope2026-11-14
mffa.challonge.comNot in the scope2026-11-14
mfg-madagascar.challonge.comNot in the scope2026-11-14
mft4.challonge.comNot in the scope2026-11-14
mgaf.challonge.comNot in the scope2026-11-14
mgcmelee.challonge.comNot in the scope2026-11-14
mgcpm.challonge.comNot in the scope2026-11-14
mgfc.challonge.comNot in the scope2026-11-14
mgstournaments.challonge.comNot in the scope2026-11-14
mgtf7.challonge.comNot in the scope2026-11-14
mgtfxi.challonge.comNot in the scope2026-11-14
mh.challonge.comNot in the scope2026-11-14
mhperu.challonge.comNot in the scope2026-11-14
mi-state-01.challonge.comNot in the scope2026-11-14
michigansmash.challonge.comNot in the scope2026-11-14
michigantest.challonge.comNot in the scope2026-11-14
microsoftforhonor.challonge.comNot in the scope2026-11-14
microsoftstoresq1.challonge.comNot in the scope2026-11-14
middleeast.challonge.comNot in the scope2026-11-14
midessathrowdown.challonge.comNot in the scope2026-11-14
midnightnoobs.challonge.comNot in the scope2026-11-14
midwestamericangaming.challonge.comNot in the scope2026-11-14
mifgc.challonge.comNot in the scope2026-11-14
migos.challonge.comNot in the scope2026-11-14
mikedtvsports.challonge.comNot in the scope2026-11-14
milanjuventusdirettasoccertv.challonge.comNot in the scope2026-11-14
milehighpm.challonge.comNot in the scope2026-11-14
millersvillesmash.challonge.comNot in the scope2026-11-14
mindsportszw.challonge.comNot in the scope2026-11-14
mineplex.challonge.comNot in the scope2026-11-14
mineplex-com-discord.challonge.comNot in the scope2026-11-14
mingarasnooker.challonge.comNot in the scope2026-11-14
minionmasters.challonge.comNot in the scope2026-11-14
minishogi.challonge.comNot in the scope2026-11-14
minit.challonge.comNot in the scope2026-11-14
mipmprpanel.challonge.comNot in the scope2026-11-14
mirrorjoust.challonge.comNot in the scope2026-11-14
mishawakasmash.challonge.comNot in the scope2026-11-14
missinginaction.challonge.comNot in the scope2026-11-14
mistafoo.challonge.comNot in the scope2026-11-14
mitbbs_pingpong.challonge.comNot in the scope2026-11-14
mitoorganization.challonge.comNot in the scope2026-11-14
mixedvirtualarts.challonge.comNot in the scope2026-11-14
mixup.challonge.comNot in the scope2026-11-14

1,405 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.