Skip to content

Bug bounty program

Platform
HackerOne
Bounties
Pays
Assets in scope
86
Disclosed reports
15
Subdomains
7,102
Vendor on CyberSIXT
Logitech (26 CVEs, 0 exploited)

Most upvoted reports15

All reports
Most upvoted reports of Logitech
ReportWeaknessDisclosedBountyVotes
One Click Account takeover using Ouath CSRF bypass by adding Null byte %00 in state parameter on www.streamlabs.comAnalysed#1046630Cross-Site Request Forgery2021-01-06–99
Manipulating response leads to free access to Streamlabs PrimeAnalysed#1070510Input Validation and Logic2021-01-21–80
Stored XSS in [https://streamlabs.com/dashboard#/*goal] pagesAnalysed#1049012Cross-site Scripting2020-12-26–68
IDOR when creating App on [platform.streamlabs.com/api/v1/store/whitelist] with user_id fieldAnalysed#983070Insecure Direct Object Reference2020-11-26–61
session takeover via open protocol redirection on streamlabs.comAnalysed#1178239Open Redirect2021-09-01$20050
CSRF in changing users donation_settings [https://streamlabs.com/api/v6/viewer-portal/viewer-settings/donation_settings]Analysed#1049360Cross-Site Request Forgery2020-12-26–49
SSRF allows reading AWS EC2 metadata using "readapi" variable in Streamlabs CloudbotAnalysed#1108418Server-Side Request Forgery2021-02-24$20041
Privilege Escalation Leads to Control The Owner Access Token Which leads to control the stream [streamlabs.com]Analysed#1174527Access Control2021-04-27–38
Host Header injection in oslo.io (using X-Forwarded-For header) leading to email spoofingAnalysed#1072277Input Validation and Logic2021-01-07–37
Sensitive information disclosure to shared access user via streamlabs platform apiAnalysed#1072893Information Disclosure2021-01-20$20036

Subdomains7,102

Subdomains of Logitech
NameScopeFirst seen
mvpgaming.challonge.comNot in the scope2026-11-14
my4drop.challonge.comNot in the scope2026-11-14
myball.challonge.comNot in the scope2026-11-14
mynec.challonge.comNot in the scope2026-11-14
myorg.challonge.comNot in the scope2026-11-14
mypoolstats.challonge.comNot in the scope2026-11-14
myrtia69.challonge.comNot in the scope2026-11-14
mysavepoint.challonge.comNot in the scope2026-11-14
n-masters.challonge.comNot in the scope2026-11-14
n-tours.challonge.comNot in the scope2026-11-14
n502gt.challonge.comNot in the scope2026-11-14
na-apprentice.challonge.comNot in the scope2026-11-14
nactf.challonge.comNot in the scope2026-11-14
nagarro.challonge.comNot in the scope2026-11-14
nall.challonge.comNot in the scope2026-11-14
nameless.challonge.comNot in the scope2026-11-14
namt.challonge.comNot in the scope2026-11-14
nandoktournaments.challonge.comNot in the scope2026-11-14
nanolaug.challonge.comNot in the scope2026-11-14
nanwl.challonge.comNot in the scope2026-11-14
naol.challonge.comNot in the scope2026-11-14
napaleagues.challonge.comNot in the scope2026-11-14
narivals.challonge.comNot in the scope2026-11-14
naroa.challonge.comNot in the scope2026-11-14
narutoqc.challonge.comNot in the scope2026-11-14
nasf.challonge.comNot in the scope2026-11-14
nashvilleairsoft.challonge.comNot in the scope2026-11-14
naussj.challonge.comNot in the scope2026-11-14
naxshuntatuoffice.challonge.comNot in the scope2026-11-14
nba2k13.challonge.comNot in the scope2026-11-14
nba2k17.challonge.comNot in the scope2026-11-14
nbacpucup.challonge.comNot in the scope2026-11-14
nblastpr.challonge.comNot in the scope2026-11-14
nbscups.challonge.comNot in the scope2026-11-14
nbtournaments.challonge.comNot in the scope2026-11-14
nbxguild.challonge.comNot in the scope2026-11-14
ncd6littleleague.challonge.comNot in the scope2026-11-14
ncd7littleleague.challonge.comNot in the scope2026-11-14
ncdistrict3littleleague.challonge.comNot in the scope2026-11-14
ncfgc.challonge.comNot in the scope2026-11-14
ncnetplay.challonge.comNot in the scope2026-11-14
ncpm.challonge.comNot in the scope2026-11-14
ncr.challonge.comNot in the scope2026-11-14
ncr11.challonge.comNot in the scope2026-11-14
ncr2015.challonge.comNot in the scope2026-11-14
ncr2016.challonge.comNot in the scope2026-11-14
ncr2017.challonge.comNot in the scope2026-11-14
ncrx.challonge.comNot in the scope2026-11-14
ncsdmelee.challonge.comNot in the scope2026-11-14
ncsl.challonge.comNot in the scope2026-11-14
ncsu.challonge.comNot in the scope2026-11-14
ndaes.challonge.comNot in the scope2026-11-14
ndt.challonge.comNot in the scope2026-11-14
nebulous.challonge.comNot in the scope2026-11-14
necdodgeball.challonge.comNot in the scope2026-11-14
nefl.challonge.comNot in the scope2026-11-14
neko.challonge.comNot in the scope2026-11-14
nensandgimps.challonge.comNot in the scope2026-11-14
neo.challonge.comNot in the scope2026-11-14
neogafboardgames.challonge.comNot in the scope2026-11-14
neptune.challonge.comNot in the scope2026-11-14
nerdbird.challonge.comNot in the scope2026-11-14
nerdhqqc.challonge.comNot in the scope2026-11-14
nerdnationpro.challonge.comNot in the scope2026-11-14
nes2.challonge.comNot in the scope2026-11-14
nessdabess.challonge.comNot in the scope2026-11-14
netbattle.challonge.comNot in the scope2026-11-14
netbellumii.challonge.comNot in the scope2026-11-14
netbyte.challonge.comNot in the scope2026-11-14
netconnect.challonge.comNot in the scope2026-11-14
netmasters.challonge.comNot in the scope2026-11-14
netplayfighters.challonge.comNot in the scope2026-11-14
netsession.challonge.comNot in the scope2026-11-14
netulous.challonge.comNot in the scope2026-11-14
neueaka.challonge.comNot in the scope2026-11-14
neumelee.challonge.comNot in the scope2026-11-14
neutralb.challonge.comNot in the scope2026-11-14
never-really-die-esports.challonge.comNot in the scope2026-11-14
neverlight.challonge.comNot in the scope2026-11-14
newangels.challonge.comNot in the scope2026-11-14
newbiefightclub.challonge.comNot in the scope2026-11-14
newchallenger.challonge.comNot in the scope2026-11-14
newchallengers.challonge.comNot in the scope2026-11-14
newclassic.challonge.comNot in the scope2026-11-14
newcomers.challonge.comNot in the scope2026-11-14
newer.challonge.comNot in the scope2026-11-14
nexcrew.challonge.comNot in the scope2026-11-14
nexsmash.challonge.comNot in the scope2026-11-14
nextgz.challonge.comNot in the scope2026-11-14
nextlevel.challonge.comNot in the scope2026-11-14
nexusct.challonge.comNot in the scope2026-11-14
nexussmartbar.challonge.comNot in the scope2026-11-14
nexustrike.challonge.comNot in the scope2026-11-14
nfinite.challonge.comNot in the scope2026-11-14
nfldsmash.challonge.comNot in the scope2026-11-14
ngm.challonge.comNot in the scope2026-11-14
ngn.challonge.comNot in the scope2026-11-14
ngo.challonge.comNot in the scope2026-11-14
ngpr.challonge.comNot in the scope2026-11-14
ngpu.challonge.comNot in the scope2026-11-14

1,405 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.