Skip to content

Bug bounty program

Platform
HackerOne
Bounties
Pays
Assets in scope
86
Disclosed reports
15
Subdomains
7,102
Vendor on CyberSIXT
Logitech (26 CVEs, 0 exploited)

Most upvoted reports15

All reports
Most upvoted reports of Logitech
ReportWeaknessDisclosedBountyVotes
One Click Account takeover using Ouath CSRF bypass by adding Null byte %00 in state parameter on www.streamlabs.comAnalysed#1046630Cross-Site Request Forgery2021-01-06–99
Manipulating response leads to free access to Streamlabs PrimeAnalysed#1070510Input Validation and Logic2021-01-21–80
Stored XSS in [https://streamlabs.com/dashboard#/*goal] pagesAnalysed#1049012Cross-site Scripting2020-12-26–68
IDOR when creating App on [platform.streamlabs.com/api/v1/store/whitelist] with user_id fieldAnalysed#983070Insecure Direct Object Reference2020-11-26–61
session takeover via open protocol redirection on streamlabs.comAnalysed#1178239Open Redirect2021-09-01$20050
CSRF in changing users donation_settings [https://streamlabs.com/api/v6/viewer-portal/viewer-settings/donation_settings]Analysed#1049360Cross-Site Request Forgery2020-12-26–49
SSRF allows reading AWS EC2 metadata using "readapi" variable in Streamlabs CloudbotAnalysed#1108418Server-Side Request Forgery2021-02-24$20041
Privilege Escalation Leads to Control The Owner Access Token Which leads to control the stream [streamlabs.com]Analysed#1174527Access Control2021-04-27–38
Host Header injection in oslo.io (using X-Forwarded-For header) leading to email spoofingAnalysed#1072277Input Validation and Logic2021-01-07–37
Sensitive information disclosure to shared access user via streamlabs platform apiAnalysed#1072893Information Disclosure2021-01-20$20036

Subdomains7,102

Subdomains of Logitech
NameScopeFirst seen
r6s-friend.challonge.comNot in the scope2026-11-14
radleague.challonge.comNot in the scope2026-11-14
ragdoll.challonge.comNot in the scope2026-11-14
ragnarokgames.challonge.comNot in the scope2026-11-14
raid.challonge.comNot in the scope2026-11-14
raidcall-event.challonge.comNot in the scope2026-11-14
railwaypleasington.challonge.comNot in the scope2026-11-14
rainbow6.challonge.comNot in the scope2026-11-14
raiseyourgame.challonge.comNot in the scope2026-11-14
rakettiliigacom.challonge.comNot in the scope2026-11-14
ralston.challonge.comNot in the scope2026-11-14
ramboot.challonge.comNot in the scope2026-11-14
ramenbowl.challonge.comNot in the scope2026-11-14
randomasstourneys.challonge.comNot in the scope2026-11-14
randomness.challonge.comNot in the scope2026-11-14
ranked.challonge.comNot in the scope2026-11-14
rankingcups.challonge.comNot in the scope2026-11-14
razer.challonge.comNot in the scope2026-11-14
razergaming.challonge.comNot in the scope2026-11-14
razorsedgegaming.challonge.comNot in the scope2026-11-14
razorsmash.challonge.comNot in the scope2026-11-14
rbattlebotshammerfall.challonge.comNot in the scope2026-11-14
rbbl.challonge.comNot in the scope2026-11-14
rbm.challonge.comNot in the scope2026-11-14
rbuh.challonge.comNot in the scope2026-11-14
rcesports.challonge.comNot in the scope2026-11-14
rcr.challonge.comNot in the scope2026-11-14
rcs-referees.challonge.comNot in the scope2026-11-14
rdarts-indonesia.challonge.comNot in the scope2026-11-14
ready2fight.challonge.comNot in the scope2026-11-14
readytofight.challonge.comNot in the scope2026-11-14
readyupql.challonge.comNot in the scope2026-11-14
realmportal.challonge.comNot in the scope2026-11-14
realneatgaming.challonge.comNot in the scope2026-11-14
realpage.challonge.comNot in the scope2026-11-14
reapersc.challonge.comNot in the scope2026-11-14
reasongaming.challonge.comNot in the scope2026-11-14
rebellion2017.challonge.comNot in the scope2026-11-14
rebootgaming.challonge.comNot in the scope2026-11-14
rebootlan.challonge.comNot in the scope2026-11-14
reborn-x.challonge.comNot in the scope2026-11-14
recess434.challonge.comNot in the scope2026-11-14
recklessdrivers.challonge.comNot in the scope2026-11-14
redbloodstv.challonge.comNot in the scope2026-11-14
redbluefamily.challonge.comNot in the scope2026-11-14
redbullesports.challonge.comNot in the scope2026-11-14
redbullkumite.challonge.comNot in the scope2026-11-14
redbullkumite-japanqualifier.challonge.comNot in the scope2026-11-14
redditbrigade.challonge.comNot in the scope2026-11-14
redditclansystem.challonge.comNot in the scope2026-11-14
redditcockfight.challonge.comNot in the scope2026-11-14
redditfighting.challonge.comNot in the scope2026-11-14
redditgamma.challonge.comNot in the scope2026-11-14
redditpokemonleague.challonge.comNot in the scope2026-11-14
redditsmash.challonge.comNot in the scope2026-11-14
redecan.challonge.comNot in the scope2026-11-14
redmountainll.challonge.comNot in the scope2026-11-14
redux.challonge.comNot in the scope2026-11-14
redzonerumble.challonge.comNot in the scope2026-11-14
reelskills.challonge.comNot in the scope2026-11-14
reflex-ru.challonge.comNot in the scope2026-11-14
reflexau.challonge.comNot in the scope2026-11-14
reflexcccp.challonge.comNot in the scope2026-11-14
reflexmonthlycups.challonge.comNot in the scope2026-11-14
refreshmedia.challonge.comNot in the scope2026-11-14
reggaming.challonge.comNot in the scope2026-11-14
regulars.challonge.comNot in the scope2026-11-14
rei.challonge.comNot in the scope2026-11-14
reignsupreme.challonge.comNot in the scope2026-11-14
reisalan.challonge.comNot in the scope2026-11-14
rejectedsithtv.challonge.comNot in the scope2026-11-14
rekabet.challonge.comNot in the scope2026-11-14
rektthegamers.challonge.comNot in the scope2026-11-14
relieflans.challonge.comNot in the scope2026-11-14
remus.challonge.comNot in the scope2026-11-14
renegadetourneys.challonge.comNot in the scope2026-11-14
renocruu.challonge.comNot in the scope2026-11-14
renocruu775.challonge.comNot in the scope2026-11-14
renovecup.challonge.comNot in the scope2026-11-14
replayablecontent.challonge.comNot in the scope2026-11-14
replayfxconsole.challonge.comNot in the scope2026-11-14
rererere.challonge.comNot in the scope2026-11-14
reset.challonge.comNot in the scope2026-11-14
resetsmash.challonge.comNot in the scope2026-11-14
resf.challonge.comNot in the scope2026-11-14
respawncl.challonge.comNot in the scope2026-11-14
respawnlan.challonge.comNot in the scope2026-11-14
resports.challonge.comNot in the scope2026-11-14
rest.challonge.comNot in the scope2026-11-14
retake.challonge.comNot in the scope2026-11-14
retrospective2.challonge.comNot in the scope2026-11-14
retroworldseries.challonge.comNot in the scope2026-11-14
revivalofstalbertsmashbros.challonge.comNot in the scope2026-11-14
revivalsam.challonge.comNot in the scope2026-11-14
revolutionaries.challonge.comNot in the scope2026-11-14
rewired2015.challonge.comNot in the scope2026-11-14
rewiredaz.challonge.comNot in the scope2026-11-14
rexionalgalego.challonge.comNot in the scope2026-11-14
rfd.challonge.comNot in the scope2026-11-14
rfl.challonge.comNot in the scope2026-11-14

1,405 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.