Skip to content

Bug bounty program

Platform
HackerOne
Bounties
Pays
Assets in scope
86
Disclosed reports
15
Subdomains
7,102
Vendor on CyberSIXT
Logitech (26 CVEs, 0 exploited)

Most upvoted reports15

All reports
Most upvoted reports of Logitech
ReportWeaknessDisclosedBountyVotes
One Click Account takeover using Ouath CSRF bypass by adding Null byte %00 in state parameter on www.streamlabs.comAnalysed#1046630Cross-Site Request Forgery2021-01-06–99
Manipulating response leads to free access to Streamlabs PrimeAnalysed#1070510Input Validation and Logic2021-01-21–80
Stored XSS in [https://streamlabs.com/dashboard#/*goal] pagesAnalysed#1049012Cross-site Scripting2020-12-26–68
IDOR when creating App on [platform.streamlabs.com/api/v1/store/whitelist] with user_id fieldAnalysed#983070Insecure Direct Object Reference2020-11-26–61
session takeover via open protocol redirection on streamlabs.comAnalysed#1178239Open Redirect2021-09-01$20050
CSRF in changing users donation_settings [https://streamlabs.com/api/v6/viewer-portal/viewer-settings/donation_settings]Analysed#1049360Cross-Site Request Forgery2020-12-26–49
SSRF allows reading AWS EC2 metadata using "readapi" variable in Streamlabs CloudbotAnalysed#1108418Server-Side Request Forgery2021-02-24$20041
Privilege Escalation Leads to Control The Owner Access Token Which leads to control the stream [streamlabs.com]Analysed#1174527Access Control2021-04-27–38
Host Header injection in oslo.io (using X-Forwarded-For header) leading to email spoofingAnalysed#1072277Input Validation and Logic2021-01-07–37
Sensitive information disclosure to shared access user via streamlabs platform apiAnalysed#1072893Information Disclosure2021-01-20$20036

Subdomains7,102

Subdomains of Logitech
NameScopeFirst seen
parttimepros.challonge.comNot in the scope2026-11-14
partykosorai2017.challonge.comNot in the scope2026-11-14
pasmash.challonge.comNot in the scope2026-11-14
passioncraft.challonge.comNot in the scope2026-11-14
pastimelegends.challonge.comNot in the scope2026-11-14
paxaus.challonge.comNot in the scope2026-11-14
paxaus2013comps.challonge.comNot in the scope2026-11-14
paxaustournaments.challonge.comNot in the scope2026-11-14
paxlanfestbyoc.challonge.comNot in the scope2026-11-14
pbc-usa.challonge.comNot in the scope2026-11-14
pccc2018.challonge.comNot in the scope2026-11-14
pcewifi.challonge.comNot in the scope2026-11-14
pcg-tournaments.challonge.comNot in the scope2026-11-14
pcgbattledome.challonge.comNot in the scope2026-11-14
pcgc.challonge.comNot in the scope2026-11-14
pcgcola.challonge.comNot in the scope2026-11-14
pcgdicemaster.challonge.comNot in the scope2026-11-14
pcgrivalsofaether.challonge.comNot in the scope2026-11-14
pcgsmash.challonge.comNot in the scope2026-11-14
pcgstreetfighter.challonge.comNot in the scope2026-11-14
pcpotatoes.challonge.comNot in the scope2026-11-14
pcs16.challonge.comNot in the scope2026-11-14
pcsmash.challonge.comNot in the scope2026-11-14
pctournament2.challonge.comNot in the scope2026-11-14
pdgsmash.challonge.comNot in the scope2026-11-14
pdlive.challonge.comNot in the scope2026-11-14
pdlseries.challonge.comNot in the scope2026-11-14
pdxlan.challonge.comNot in the scope2026-11-14
pdxsmashdojo.challonge.comNot in the scope2026-11-14
peanuts.challonge.comNot in the scope2026-11-14
penguin-gaming.challonge.comNot in the scope2026-11-14
pennhalo.challonge.comNot in the scope2026-11-14
pensacolamelee.challonge.comNot in the scope2026-11-14
pentaclick.challonge.comNot in the scope2026-11-14
pentakillproducciones.challonge.comNot in the scope2026-11-14
perfectpokemon.challonge.comNot in the scope2026-11-14
personal.challonge.comNot in the scope2026-11-14
perthrocketleague.challonge.comNot in the scope2026-11-14
peru-tour.challonge.comNot in the scope2026-11-14
peruchampstours.challonge.comNot in the scope2026-11-14
perutorneos.challonge.comNot in the scope2026-11-14
pewpew-tour.challonge.comNot in the scope2026-11-14
pewpewtourspn1.challonge.comNot in the scope2026-11-14
pezomatic-ou.challonge.comNot in the scope2026-11-14
pfl2015.challonge.comNot in the scope2026-11-14
pg3d.challonge.comNot in the scope2026-11-14
pge.challonge.comNot in the scope2026-11-14
pghpm.challonge.comNot in the scope2026-11-14
pgleague.challonge.comNot in the scope2026-11-14
pgls.challonge.comNot in the scope2026-11-14
pglstarromania.challonge.comNot in the scope2026-11-14
pgsmash.challonge.comNot in the scope2026-11-14
ph-tours.challonge.comNot in the scope2026-11-14
ph1r3.challonge.comNot in the scope2026-11-14
phalanxuniverse.challonge.comNot in the scope2026-11-14
phantomers.challonge.comNot in the scope2026-11-14
phantomindex.challonge.comNot in the scope2026-11-14
phillytt.challonge.comNot in the scope2026-11-14
phoenixcommunitytournaments.challonge.comNot in the scope2026-11-14
phoenixflare.challonge.comNot in the scope2026-11-14
phssmash.challonge.comNot in the scope2026-11-14
phtours.challonge.comNot in the scope2026-11-14
phyrexiangames.challonge.comNot in the scope2026-11-14
pichucord.challonge.comNot in the scope2026-11-14
piddywongg.challonge.comNot in the scope2026-11-14
pie.challonge.comNot in the scope2026-11-14
pielms.challonge.comNot in the scope2026-11-14
pietsmiet.challonge.comNot in the scope2026-11-14
pikadosavezbpz.challonge.comNot in the scope2026-11-14
pingzero.challonge.comNot in the scope2026-11-14
pir.challonge.comNot in the scope2026-11-14
pismomoose.challonge.comNot in the scope2026-11-14
pittsmash.challonge.comNot in the scope2026-11-14
pitytournaments.challonge.comNot in the scope2026-11-14
pivswshlivestreamnfl2016week1.challonge.comNot in the scope2026-11-14
pixel.challonge.comNot in the scope2026-11-14
pixelek.challonge.comNot in the scope2026-11-14
pixelesports.challonge.comNot in the scope2026-11-14
pixelmonfr.challonge.comNot in the scope2026-11-14
pixels4peace.challonge.comNot in the scope2026-11-14
pizzagames.challonge.comNot in the scope2026-11-14
pjs.challonge.comNot in the scope2026-11-14
pkadmin.challonge.comNot in the scope2026-11-14
pkf.challonge.comNot in the scope2026-11-14
pkmncrystal.challonge.comNot in the scope2026-11-14
pkmnrd.challonge.comNot in the scope2026-11-14
pl123pl.challonge.comNot in the scope2026-11-14
pl4ycod.challonge.comNot in the scope2026-11-14
pla2n.challonge.comNot in the scope2026-11-14
platinahun.challonge.comNot in the scope2026-11-14
play-the-championships.challonge.comNot in the scope2026-11-14
play2winogt.challonge.comNot in the scope2026-11-14
playaid.challonge.comNot in the scope2026-11-14
playaiduk.challonge.comNot in the scope2026-11-14
playbook.challonge.comNot in the scope2026-11-14
playconnectiongaming.challonge.comNot in the scope2026-11-14
playdagz.challonge.comNot in the scope2026-11-14
playdowngame.challonge.comNot in the scope2026-11-14
player1.challonge.comNot in the scope2026-11-14
player1negaming.challonge.comNot in the scope2026-11-14

1,405 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.