Skip to content

Bug bounty program

Platform
HackerOne
Bounties
Pays
Assets in scope
86
Disclosed reports
15
Subdomains
7,102
Vendor on CyberSIXT
Logitech (26 CVEs, 0 exploited)

Most upvoted reports15

All reports
Most upvoted reports of Logitech
ReportWeaknessDisclosedBountyVotes
One Click Account takeover using Ouath CSRF bypass by adding Null byte %00 in state parameter on www.streamlabs.comAnalysed#1046630Cross-Site Request Forgery2021-01-06–99
Manipulating response leads to free access to Streamlabs PrimeAnalysed#1070510Input Validation and Logic2021-01-21–80
Stored XSS in [https://streamlabs.com/dashboard#/*goal] pagesAnalysed#1049012Cross-site Scripting2020-12-26–68
IDOR when creating App on [platform.streamlabs.com/api/v1/store/whitelist] with user_id fieldAnalysed#983070Insecure Direct Object Reference2020-11-26–61
session takeover via open protocol redirection on streamlabs.comAnalysed#1178239Open Redirect2021-09-01$20050
CSRF in changing users donation_settings [https://streamlabs.com/api/v6/viewer-portal/viewer-settings/donation_settings]Analysed#1049360Cross-Site Request Forgery2020-12-26–49
SSRF allows reading AWS EC2 metadata using "readapi" variable in Streamlabs CloudbotAnalysed#1108418Server-Side Request Forgery2021-02-24$20041
Privilege Escalation Leads to Control The Owner Access Token Which leads to control the stream [streamlabs.com]Analysed#1174527Access Control2021-04-27–38
Host Header injection in oslo.io (using X-Forwarded-For header) leading to email spoofingAnalysed#1072277Input Validation and Logic2021-01-07–37
Sensitive information disclosure to shared access user via streamlabs platform api#1072893Information Disclosure2021-01-20$20036

Subdomains7,102

Subdomains of Logitech
NameScopeFirst seen
mkawcsports2017.challonge.comNot in the scope2026-11-14
mkb.challonge.comNot in the scope2026-11-14
mkers.challonge.comNot in the scope2026-11-14
mkps32017.challonge.comNot in the scope2026-11-14
mkx-irkutsk.challonge.comNot in the scope2026-11-14
mlcbul.challonge.comNot in the scope2026-11-14
mlgsmash.challonge.comNot in the scope2026-11-14
mlm.challonge.comNot in the scope2026-11-14
mlmregulars.challonge.comNot in the scope2026-11-14
mm.challonge.comNot in the scope2026-11-14
mm1.challonge.comNot in the scope2026-11-14
mmom.challonge.comNot in the scope2026-11-14
mmrl.challonge.comNot in the scope2026-11-14
mmstcsmash.challonge.comNot in the scope2026-11-14
mmttournaments.challonge.comNot in the scope2026-11-14
mmx.challonge.comNot in the scope2026-11-14
mmx4.challonge.comNot in the scope2026-11-14
mmxtrilogy.challonge.comNot in the scope2026-11-14
mnbrawlminus.challonge.comNot in the scope2026-11-14
mncs3nitro.challonge.comNot in the scope2026-11-14
mnfgc.challonge.comNot in the scope2026-11-14
mnm.challonge.comNot in the scope2026-11-14
mns.challonge.comNot in the scope2026-11-14
mnsmashpack.challonge.comNot in the scope2026-11-14
moal.challonge.comNot in the scope2026-11-14
mockit.challonge.comNot in the scope2026-11-14
mof.challonge.comNot in the scope2026-11-14
mok.challonge.comNot in the scope2026-11-14
mollebakkenskole.challonge.comNot in the scope2026-11-14
momocon.challonge.comNot in the scope2026-11-14
momspartyd.challonge.comNot in the scope2026-11-14
mondaynightranbats.challonge.comNot in the scope2026-11-14
mondays-at-hitide.challonge.comNot in the scope2026-11-14
moneybones.challonge.comNot in the scope2026-11-14
moneybones1.challonge.comNot in the scope2026-11-14
moneymatchgaming.challonge.comNot in the scope2026-11-14
mongbat.challonge.comNot in the scope2026-11-14
monkeycards.challonge.comNot in the scope2026-11-14
monochrome.challonge.comNot in the scope2026-11-14
monolith.challonge.comNot in the scope2026-11-14
monsoon.challonge.comNot in the scope2026-11-14
monsters.challonge.comNot in the scope2026-11-14
montanamelee.challonge.comNot in the scope2026-11-14
montanameleevii.challonge.comNot in the scope2026-11-14
montanasmash.challonge.comNot in the scope2026-11-14
montrealpokemonleague.challonge.comNot in the scope2026-11-14
moonbase.challonge.comNot in the scope2026-11-14
moonbeam.challonge.comNot in the scope2026-11-14
moosegets2nd.challonge.comNot in the scope2026-11-14
morenortah.challonge.comNot in the scope2026-11-14
morkusbar.challonge.comNot in the scope2026-11-14
www.morkusbar.challonge.comNot in the scope2026-11-14
morrapita.challonge.comNot in the scope2026-11-14
mp.challonge.comNot in the scope2026-11-14
mpcleague.challonge.comNot in the scope2026-11-14
mpdg.challonge.comNot in the scope2026-11-14
mpll8-10yo.challonge.comNot in the scope2026-11-14
mpr.challonge.comNot in the scope2026-11-14
mps.challonge.comNot in the scope2026-11-14
mpspain.challonge.comNot in the scope2026-11-14
mqs.challonge.comNot in the scope2026-11-14
mrcf3st.challonge.comNot in the scope2026-11-14
mrsmash.challonge.comNot in the scope2026-11-14
mrsupremoh.challonge.comNot in the scope2026-11-14
mrt.challonge.comNot in the scope2026-11-14
mrusmash.challonge.comNot in the scope2026-11-14
mruweeklies.challonge.comNot in the scope2026-11-14
msb.challonge.comNot in the scope2026-11-14
msboc.challonge.comNot in the scope2026-11-14
msigeforcecup.challonge.comNot in the scope2026-11-14
msk.challonge.comNot in the scope2026-11-14
msll9-10yo.challonge.comNot in the scope2026-11-14
msm6.challonge.comNot in the scope2026-11-14
mssmash.challonge.comNot in the scope2026-11-14
mst2k.challonge.comNot in the scope2026-11-14
msu.challonge.comNot in the scope2026-11-14
msvan.challonge.comNot in the scope2026-11-14
mtac.challonge.comNot in the scope2026-11-14
mtevents.challonge.comNot in the scope2026-11-14
mtg-fr.challonge.comNot in the scope2026-11-14
mthssmash.challonge.comNot in the scope2026-11-14
mtlfgc.challonge.comNot in the scope2026-11-14
mtvmelee.challonge.comNot in the scope2026-11-14
mubz.challonge.comNot in the scope2026-11-14
muffin.challonge.comNot in the scope2026-11-14
muga.challonge.comNot in the scope2026-11-14
mulancup.challonge.comNot in the scope2026-11-14
mundoaoe.challonge.comNot in the scope2026-11-14
muoptinet.challonge.comNot in the scope2026-11-14
muoptinet-gm.challonge.comNot in the scope2026-11-14
muoptinet3rr.challonge.comNot in the scope2026-11-14
murderwear.challonge.comNot in the scope2026-11-14
murrayvsfogninilivestreamtennisatp.challonge.comNot in the scope2026-11-14
musicfederation98.challonge.comNot in the scope2026-11-14
musicgamesatl.challonge.comNot in the scope2026-11-14
mutecity.challonge.comNot in the scope2026-11-14
mutlufare.challonge.comNot in the scope2026-11-14
mutlufare2.challonge.comNot in the scope2026-11-14
muw.challonge.comNot in the scope2026-11-14
mvcbot.challonge.comNot in the scope2026-11-14

1,405 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.