Skip to content

Bug bounty program

Platform
HackerOne
Bounties
Pays
Assets in scope
86
Disclosed reports
15
Subdomains
7,102
Vendor on CyberSIXT
Logitech (26 CVEs, 0 exploited)

Most upvoted reports15

All reports
Most upvoted reports of Logitech
ReportWeaknessDisclosedBountyVotes
One Click Account takeover using Ouath CSRF bypass by adding Null byte %00 in state parameter on www.streamlabs.comAnalysed#1046630Cross-Site Request Forgery2021-01-06–99
Manipulating response leads to free access to Streamlabs PrimeAnalysed#1070510Input Validation and Logic2021-01-21–80
Stored XSS in [https://streamlabs.com/dashboard#/*goal] pagesAnalysed#1049012Cross-site Scripting2020-12-26–68
IDOR when creating App on [platform.streamlabs.com/api/v1/store/whitelist] with user_id fieldAnalysed#983070Insecure Direct Object Reference2020-11-26–61
session takeover via open protocol redirection on streamlabs.comAnalysed#1178239Open Redirect2021-09-01$20050
CSRF in changing users donation_settings [https://streamlabs.com/api/v6/viewer-portal/viewer-settings/donation_settings]Analysed#1049360Cross-Site Request Forgery2020-12-26–49
SSRF allows reading AWS EC2 metadata using "readapi" variable in Streamlabs CloudbotAnalysed#1108418Server-Side Request Forgery2021-02-24$20041
Privilege Escalation Leads to Control The Owner Access Token Which leads to control the stream [streamlabs.com]Analysed#1174527Access Control2021-04-27–38
Host Header injection in oslo.io (using X-Forwarded-For header) leading to email spoofingAnalysed#1072277Input Validation and Logic2021-01-07–37
Sensitive information disclosure to shared access user via streamlabs platform apiAnalysed#1072893Information Disclosure2021-01-20$20036

Subdomains7,102

Subdomains of Logitech
NameScopeFirst seen
probruina.challonge.comNot in the scope2026-11-14
product.challonge.comNot in the scope2026-11-14
progaming.challonge.comNot in the scope2026-11-14
prohearthstone.challonge.comNot in the scope2026-11-14
proigl.challonge.comNot in the scope2026-11-14
project-conquerors.challonge.comNot in the scope2026-11-14
project-to.challonge.comNot in the scope2026-11-14
projectares.challonge.comNot in the scope2026-11-14
projectdream.challonge.comNot in the scope2026-11-14
prolabgaming.challonge.comNot in the scope2026-11-14
proleguagebot.challonge.comNot in the scope2026-11-14
prometheus-lan.challonge.commonitoringNot in the scope2026-11-14
promotion.challonge.comNot in the scope2026-11-14
prorla.challonge.comNot in the scope2026-11-14
protoisisfag.challonge.comNot in the scope2026-11-14
protournamentleague.challonge.comNot in the scope2026-11-14
proxytempest.challonge.comNot in the scope2026-11-14
pruebas2015.challonge.comNot in the scope2026-11-14
psgclassic.challonge.comNot in the scope2026-11-14
psgclassic2017.challonge.comNot in the scope2026-11-14
psgmaster.challonge.comNot in the scope2026-11-14
pshesports.challonge.comNot in the scope2026-11-14
pshowdownmastersleague.challonge.comNot in the scope2026-11-14
psionicaftermath.challonge.comNot in the scope2026-11-14
psixoz.challonge.comNot in the scope2026-11-14
psnstourneys.challonge.comNot in the scope2026-11-14
psychovipers.challonge.comNot in the scope2026-11-14
ptcgo.challonge.comNot in the scope2026-11-14
ptspotgaming.challonge.comNot in the scope2026-11-14
ptvr.challonge.comNot in the scope2026-11-14
ptw-ssb.challonge.comNot in the scope2026-11-14
pubmasters.challonge.comNot in the scope2026-11-14
pucketts.challonge.comNot in the scope2026-11-14
pueyrredon.challonge.comNot in the scope2026-11-14
pugrivals.challonge.comNot in the scope2026-11-14
pulse-gaming.challonge.comNot in the scope2026-11-14
pumasmorelos.challonge.comNot in the scope2026-11-14
punchplanet.challonge.comNot in the scope2026-11-14
puntodesalto.challonge.comNot in the scope2026-11-14
puntogamer.challonge.comNot in the scope2026-11-14
purplesquad.challonge.comNot in the scope2026-11-14
puyat.challonge.comNot in the scope2026-11-14
puyoaustralia.challonge.comNot in the scope2026-11-14
puyonexus.challonge.comNot in the scope2026-11-14
puzzlefighter.challonge.comNot in the scope2026-11-14
puzzlefighters.challonge.comNot in the scope2026-11-14
puzzlegeneral.challonge.comNot in the scope2026-11-14
pv.challonge.comNot in the scope2026-11-14
pvpgaming.challonge.comNot in the scope2026-11-14
pxb.challonge.comNot in the scope2026-11-14
pyrolyse.challonge.comNot in the scope2026-11-14
pyyric.challonge.comNot in the scope2026-11-14
pztsc.challonge.comNot in the scope2026-11-14
q2jump.challonge.comNot in the scope2026-11-14
qatarfgc.challonge.comNot in the scope2026-11-14
qbsa.challonge.comNot in the scope2026-11-14
qc.challonge.comNot in the scope2026-11-14
qcc.challonge.comNot in the scope2026-11-14
qcda.challonge.comNot in the scope2026-11-14
qcdekhockey.challonge.comNot in the scope2026-11-14
qceu.challonge.comNot in the scope2026-11-14
qcger.challonge.comNot in the scope2026-11-14
qcleague.challonge.comNot in the scope2026-11-14
qfgc.challonge.comNot in the scope2026-11-14
qlcat.challonge.comNot in the scope2026-11-14
qlpickupru.challonge.comNot in the scope2026-11-14
qlreddit.challonge.comNot in the scope2026-11-14
qlza.challonge.comNot in the scope2026-11-14
qme.challonge.comNot in the scope2026-11-14
qmqsmash.challonge.comNot in the scope2026-11-14
qqqqqwewetyewrtwet.challonge.comNot in the scope2026-11-14
qsf-na.challonge.comNot in the scope2026-11-14
qtcup.challonge.comNot in the scope2026-11-14
qtt.challonge.comNot in the scope2026-11-14
qttourney.challonge.comNot in the scope2026-11-14
qttsmashmelee.challonge.comNot in the scope2026-11-14
quackout.challonge.comNot in the scope2026-11-14
quake.challonge.comNot in the scope2026-11-14
quake-champions-eu-discord.challonge.comNot in the scope2026-11-14
quakecon.challonge.comNot in the scope2026-11-14
quakelive.challonge.comNot in the scope2026-11-14
quakelivedk.challonge.comNot in the scope2026-11-14
quakenation.challonge.comNot in the scope2026-11-14
quakeworld.challonge.comNot in the scope2026-11-14
quakeyyyyyysquiz-jgfr.challonge.comNot in the scope2026-11-14
quarantinecanteen.challonge.comNot in the scope2026-11-14
quarantinequphtx.challonge.comNot in the scope2026-11-14
quarkesports.challonge.comNot in the scope2026-11-14
quarterlyrapport.challonge.comNot in the scope2026-11-14
questihl.challonge.comNot in the scope2026-11-14
quickcashmix.challonge.comNot in the scope2026-11-14
quickspin.challonge.comNot in the scope2026-11-14
quitogameshow.challonge.comNot in the scope2026-11-14
quizliga.challonge.comNot in the scope2026-11-14
qyn.challonge.comNot in the scope2026-11-14
r-cade.challonge.comNot in the scope2026-11-14
r-injustice.challonge.comNot in the scope2026-11-14
r15.challonge.comNot in the scope2026-11-14
r2team.challonge.comNot in the scope2026-11-14
r3.challonge.comNot in the scope2026-11-14

1,405 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.