Skip to content

Bug bounty program

Platform
HackerOne
Bounties
Pays
Assets in scope
86
Disclosed reports
15
Subdomains
7,102
Vendor on CyberSIXT
Logitech (26 CVEs, 0 exploited)

Most upvoted reports15

All reports
Most upvoted reports of Logitech
ReportWeaknessDisclosedBountyVotes
One Click Account takeover using Ouath CSRF bypass by adding Null byte %00 in state parameter on www.streamlabs.comAnalysed#1046630Cross-Site Request Forgery2021-01-06–99
Manipulating response leads to free access to Streamlabs PrimeAnalysed#1070510Input Validation and Logic2021-01-21–80
Stored XSS in [https://streamlabs.com/dashboard#/*goal] pagesAnalysed#1049012Cross-site Scripting2020-12-26–68
IDOR when creating App on [platform.streamlabs.com/api/v1/store/whitelist] with user_id fieldAnalysed#983070Insecure Direct Object Reference2020-11-26–61
session takeover via open protocol redirection on streamlabs.comAnalysed#1178239Open Redirect2021-09-01$20050
CSRF in changing users donation_settings [https://streamlabs.com/api/v6/viewer-portal/viewer-settings/donation_settings]Analysed#1049360Cross-Site Request Forgery2020-12-26–49
SSRF allows reading AWS EC2 metadata using "readapi" variable in Streamlabs CloudbotAnalysed#1108418Server-Side Request Forgery2021-02-24$20041
Privilege Escalation Leads to Control The Owner Access Token Which leads to control the stream [streamlabs.com]Analysed#1174527Access Control2021-04-27–38
Host Header injection in oslo.io (using X-Forwarded-For header) leading to email spoofingAnalysed#1072277Input Validation and Logic2021-01-07–37
Sensitive information disclosure to shared access user via streamlabs platform apiAnalysed#1072893Information Disclosure2021-01-20$20036

Subdomains7,102

Subdomains of Logitech
NameScopeFirst seen
ngsmash.challonge.comNot in the scope2026-11-14
ngu2015.challonge.comNot in the scope2026-11-14
ngu2016.challonge.comNot in the scope2026-11-14
ngu2017.challonge.comNot in the scope2026-11-14
nhs.challonge.comNot in the scope2026-11-14
nhsmash.challonge.comNot in the scope2026-11-14
nhstournament.challonge.comNot in the scope2026-11-14
ni.challonge.comNot in the scope2026-11-14
nickachuuu.challonge.comNot in the scope2026-11-14
niggies.challonge.comNot in the scope2026-11-14
nimbus.challonge.comNot in the scope2026-11-14
nintendoarena.challonge.comNot in the scope2026-11-14
nintendomaine.challonge.comNot in the scope2026-11-14
nintendome.challonge.comNot in the scope2026-11-14
nintendonetwork.challonge.comNot in the scope2026-11-14
nintendoswitchmaule.challonge.comNot in the scope2026-11-14
nintopoly.challonge.comNot in the scope2026-11-14
nirvanadata.challonge.comNot in the scope2026-11-14
nirvanatursng.challonge.comNot in the scope2026-11-14
nitrogen.challonge.comNot in the scope2026-11-14
njitgc.challonge.comNot in the scope2026-11-14
njnetplay.challonge.comNot in the scope2026-11-14
njssbm.challonge.comNot in the scope2026-11-14
nkotb.challonge.comNot in the scope2026-11-14
nksuz.challonge.comNot in the scope2026-11-14
nlfightingjam.challonge.comNot in the scope2026-11-14
nls.challonge.comNot in the scope2026-11-14
nmaciad.challonge.comNot in the scope2026-11-14
nmb.challonge.comNot in the scope2026-11-14
nmbm.challonge.comNot in the scope2026-11-14
nmbracket.challonge.comNot in the scope2026-11-14
nmexst.challonge.comNot in the scope2026-11-14
nmfightclub.challonge.comNot in the scope2026-11-14
nms-ts.challonge.comNot in the scope2026-11-14
nmsmash.challonge.comNot in the scope2026-11-14
nncl.challonge.comNot in the scope2026-11-14
nngtoronto.challonge.comNot in the scope2026-11-14
nnopen.challonge.comNot in the scope2026-11-14
nobeltlan.challonge.comNot in the scope2026-11-14
noblevents.challonge.comNot in the scope2026-11-14
nocturnos.challonge.comNot in the scope2026-11-14
nof.challonge.comNot in the scope2026-11-14
nogi-copadamalasia7.challonge.comNot in the scope2026-11-14
nohonorcrew.challonge.comNot in the scope2026-11-14
nolimitgaming.challonge.comNot in the scope2026-11-14
noobcup.challonge.comNot in the scope2026-11-14
noobz.challonge.comNot in the scope2026-11-14
norcalhss.challonge.comNot in the scope2026-11-14
norcalpm.challonge.comNot in the scope2026-11-14
norcaltournament.challonge.comNot in the scope2026-11-14
nordgard.challonge.comNot in the scope2026-11-14
nordicmeleenetplay.challonge.comNot in the scope2026-11-14
nordicnetparty.challonge.comNot in the scope2026-11-14
norfair.challonge.comNot in the scope2026-11-14
norfolksmash.challonge.comNot in the scope2026-11-14
northbaymelee.challonge.comNot in the scope2026-11-14
northbaysmash.challonge.comNot in the scope2026-11-14
northeast.challonge.comNot in the scope2026-11-14
northeastbeyblade.challonge.comNot in the scope2026-11-14
northernillinoispickleball.challonge.comNot in the scope2026-11-14
northernlegends.challonge.comNot in the scope2026-11-14
northlandsmash.challonge.comNot in the scope2026-11-14
noscup.challonge.comNot in the scope2026-11-14
nosoundgaming.challonge.comNot in the scope2026-11-14
nosue.challonge.comNot in the scope2026-11-14
not-srp.challonge.comNot in the scope2026-11-14
notechgaming.challonge.comNot in the scope2026-11-14
novaroa.challonge.comNot in the scope2026-11-14
novicecup.challonge.comNot in the scope2026-11-14
nowin3d.challonge.comNot in the scope2026-11-14
nowyourage.challonge.comNot in the scope2026-11-14
npapokemonleague.challonge.comNot in the scope2026-11-14
npbcll.challonge.comNot in the scope2026-11-14
nplneyveli.challonge.comNot in the scope2026-11-14
npz.challonge.comNot in the scope2026-11-14
nrs.challonge.comNot in the scope2026-11-14
ns2fi.challonge.comNot in the scope2026-11-14
nsgfa.challonge.comNot in the scope2026-11-14
nsmbw.challonge.comNot in the scope2026-11-14
nssplash.challonge.comNot in the scope2026-11-14
nstt.challonge.comNot in the scope2026-11-14
ntdo.challonge.comNot in the scope2026-11-14
ntesports.challonge.comNot in the scope2026-11-14
ntesports1.challonge.comNot in the scope2026-11-14
nthgen.challonge.comNot in the scope2026-11-14
ntower.challonge.comNot in the scope2026-11-14
ntpcesports.challonge.comNot in the scope2026-11-14
nucleusgg.challonge.comNot in the scope2026-11-14
nuggetbridge.challonge.comNot in the scope2026-11-14
nves.challonge.comNot in the scope2026-11-14
nvida.challonge.comNot in the scope2026-11-14
nvll.challonge.comNot in the scope2026-11-14
nw45ll.challonge.comNot in the scope2026-11-14
nwcl.challonge.comNot in the scope2026-11-14
nwes.challonge.comNot in the scope2026-11-14
nwm.challonge.comNot in the scope2026-11-14
nwm10.challonge.comNot in the scope2026-11-14
nwm2016.challonge.comNot in the scope2026-11-14
nwm4.challonge.comNot in the scope2026-11-14
nwm7.challonge.comNot in the scope2026-11-14

1,405 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.