Skip to content

Bug bounty program

Platform
HackerOne
Bounties
Pays
Assets in scope
86
Disclosed reports
15
Subdomains
7,102
Vendor on CyberSIXT
Logitech (26 CVEs, 0 exploited)

Most upvoted reports15

All reports
Most upvoted reports of Logitech
ReportWeaknessDisclosedBountyVotes
One Click Account takeover using Ouath CSRF bypass by adding Null byte %00 in state parameter on www.streamlabs.comAnalysed#1046630Cross-Site Request Forgery2021-01-06–99
Manipulating response leads to free access to Streamlabs PrimeAnalysed#1070510Input Validation and Logic2021-01-21–80
Stored XSS in [https://streamlabs.com/dashboard#/*goal] pagesAnalysed#1049012Cross-site Scripting2020-12-26–68
IDOR when creating App on [platform.streamlabs.com/api/v1/store/whitelist] with user_id fieldAnalysed#983070Insecure Direct Object Reference2020-11-26–61
session takeover via open protocol redirection on streamlabs.comAnalysed#1178239Open Redirect2021-09-01$20050
CSRF in changing users donation_settings [https://streamlabs.com/api/v6/viewer-portal/viewer-settings/donation_settings]Analysed#1049360Cross-Site Request Forgery2020-12-26–49
SSRF allows reading AWS EC2 metadata using "readapi" variable in Streamlabs CloudbotAnalysed#1108418Server-Side Request Forgery2021-02-24$20041
Privilege Escalation Leads to Control The Owner Access Token Which leads to control the stream [streamlabs.com]Analysed#1174527Access Control2021-04-27–38
Host Header injection in oslo.io (using X-Forwarded-For header) leading to email spoofingAnalysed#1072277Input Validation and Logic2021-01-07–37
Sensitive information disclosure to shared access user via streamlabs platform apiAnalysed#1072893Information Disclosure2021-01-20$20036

Subdomains7,102

Subdomains of Logitech
NameScopeFirst seen
playerdotcrew.challonge.comNot in the scope2026-11-14
playermint.challonge.comNot in the scope2026-11-14
playforstuff.challonge.comNot in the scope2026-11-14
playgroundhobbycafe.challonge.comNot in the scope2026-11-14
playhots.challonge.comNot in the scope2026-11-14
playinpickleball.challonge.comNot in the scope2026-11-14
playleague.challonge.comNot in the scope2026-11-14
playmakerwanted.challonge.comNot in the scope2026-11-14
playonwasd.challonge.comNot in the scope2026-11-14
playparkallstars.challonge.comNot in the scope2026-11-14
playparkspecialforce2.challonge.comNot in the scope2026-11-14
pllayconnection.challonge.comNot in the scope2026-11-14
plovdivsnooker.challonge.comNot in the scope2026-11-14
plovdivsnookerchampionship.challonge.comNot in the scope2026-11-14
plugandplay.challonge.comNot in the scope2026-11-14
plwot.challonge.comNot in the scope2026-11-14
pm-weekly.challonge.comNot in the scope2026-11-14
pmccup.challonge.comNot in the scope2026-11-14
pmcucd.challonge.comNot in the scope2026-11-14
pmdcult.challonge.comNot in the scope2026-11-14
pmml.challonge.comNot in the scope2026-11-14
pmt.challonge.comNot in the scope2026-11-14
pmtours.challonge.comNot in the scope2026-11-14
pnwr.challonge.comNot in the scope2026-11-14
po7.challonge.comNot in the scope2026-11-14
pobc.challonge.comNot in the scope2026-11-14
pocketbotcup.challonge.comNot in the scope2026-11-14
pocketsleague.challonge.comNot in the scope2026-11-14
pogchampcambridge.challonge.comNot in the scope2026-11-14
pogchampseries.challonge.comNot in the scope2026-11-14
pointdokoftournament.challonge.comNot in the scope2026-11-14
pokebeach.challonge.comNot in the scope2026-11-14
pokecollege.challonge.comNot in the scope2026-11-14
pokedailypokemmo2017.challonge.comNot in the scope2026-11-14
pokedaycare.challonge.comNot in the scope2026-11-14
pokemasterleague.challonge.comNot in the scope2026-11-14
pokeminer5.challonge.comNot in the scope2026-11-14
pokemmostaff.challonge.comNot in the scope2026-11-14
pokemmotournament.challonge.comNot in the scope2026-11-14
pokemmotournaments.challonge.comNot in the scope2026-11-14
pokemonamapa.challonge.comNot in the scope2026-11-14
pokemonce.challonge.comNot in the scope2026-11-14
pokemoncentral.challonge.comNot in the scope2026-11-14
pokemongc.challonge.comNot in the scope2026-11-14
pokemongochampionshipseries.challonge.comNot in the scope2026-11-14
pokemonleaguehq.challonge.comNot in the scope2026-11-14
pokemonperfect.challonge.comNot in the scope2026-11-14
pokemonuae.challonge.comNot in the scope2026-11-14
pokerheroes.challonge.comNot in the scope2026-11-14
pokesh-owdown.challonge.comNot in the scope2026-11-14
poketime.challonge.comNot in the scope2026-11-14
poketools.challonge.comNot in the scope2026-11-14
poketroncup.challonge.comNot in the scope2026-11-14
pokken-tournament-ottawa.challonge.comNot in the scope2026-11-14
pokkenarena.challonge.comNot in the scope2026-11-14
pokkenchampseries.challonge.comNot in the scope2026-11-14
pokkenmadrid.challonge.comNot in the scope2026-11-14
pokkenpt.challonge.comNot in the scope2026-11-14
pokkentournament.challonge.comNot in the scope2026-11-14
poktour.challonge.comNot in the scope2026-11-14
polarfluke.challonge.comNot in the scope2026-11-14
polaritygg.challonge.comNot in the scope2026-11-14
polarparty.challonge.comNot in the scope2026-11-14
politikerstarcraft.challonge.comNot in the scope2026-11-14
ponguw-stout.challonge.comNot in the scope2026-11-14
pooladdicts.challonge.comNot in the scope2026-11-14
poopydick.challonge.comNot in the scope2026-11-14
popcap.challonge.comNot in the scope2026-11-14
popcorncsgo.challonge.comNot in the scope2026-11-14
popdartsgame.challonge.comNot in the scope2026-11-14
populacegaming.challonge.comNot in the scope2026-11-14
porcinin.challonge.comNot in the scope2026-11-14
porkasteam.challonge.comNot in the scope2026-11-14
poshma.challonge.comNot in the scope2026-11-14
postboyz.challonge.comNot in the scope2026-11-14
potsdamvideogamingclub.challonge.comNot in the scope2026-11-14
powerbutton.challonge.comNot in the scope2026-11-14
powerlan.challonge.comNot in the scope2026-11-14
powerplayersleague.challonge.comNot in the scope2026-11-14
powerrankings.challonge.comNot in the scope2026-11-14
powerstrugglehh.challonge.comNot in the scope2026-11-14
poxui.challonge.comNot in the scope2026-11-14
pp19.challonge.comNot in the scope2026-11-14
pp21.challonge.comNot in the scope2026-11-14
pp22.challonge.comNot in the scope2026-11-14
pp27.challonge.comNot in the scope2026-11-14
ppcadesim.challonge.comNot in the scope2026-11-14
ppmctournaments.challonge.comNot in the scope2026-11-14
ppo.challonge.comNot in the scope2026-11-14
pptournament.challonge.comNot in the scope2026-11-14
praeses.challonge.comNot in the scope2026-11-14
praetorhyper.challonge.comNot in the scope2026-11-14
preventice.challonge.comNot in the scope2026-11-14
primitive.challonge.comNot in the scope2026-11-14
primitive-mammals.challonge.comNot in the scope2026-11-14
princeton.challonge.comNot in the scope2026-11-14
princetonsmash.challonge.comNot in the scope2026-11-14
prismatic.challonge.comNot in the scope2026-11-14
pro-playgames.challonge.comNot in the scope2026-11-14
probots.challonge.comNot in the scope2026-11-14

1,405 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.