Skip to content

Bug bounty program

Platform
HackerOne
Bounties
Pays
Assets in scope
86
Disclosed reports
15
Subdomains
7,102
Vendor on CyberSIXT
Logitech (26 CVEs, 0 exploited)

Most upvoted reports15

All reports
Most upvoted reports of Logitech
ReportWeaknessDisclosedBountyVotes
One Click Account takeover using Ouath CSRF bypass by adding Null byte %00 in state parameter on www.streamlabs.comAnalysed#1046630Cross-Site Request Forgery2021-01-06–99
Manipulating response leads to free access to Streamlabs PrimeAnalysed#1070510Input Validation and Logic2021-01-21–80
Stored XSS in [https://streamlabs.com/dashboard#/*goal] pagesAnalysed#1049012Cross-site Scripting2020-12-26–68
IDOR when creating App on [platform.streamlabs.com/api/v1/store/whitelist] with user_id fieldAnalysed#983070Insecure Direct Object Reference2020-11-26–61
session takeover via open protocol redirection on streamlabs.comAnalysed#1178239Open Redirect2021-09-01$20050
CSRF in changing users donation_settings [https://streamlabs.com/api/v6/viewer-portal/viewer-settings/donation_settings]Analysed#1049360Cross-Site Request Forgery2020-12-26–49
SSRF allows reading AWS EC2 metadata using "readapi" variable in Streamlabs CloudbotAnalysed#1108418Server-Side Request Forgery2021-02-24$20041
Privilege Escalation Leads to Control The Owner Access Token Which leads to control the stream [streamlabs.com]Analysed#1174527Access Control2021-04-27–38
Host Header injection in oslo.io (using X-Forwarded-For header) leading to email spoofingAnalysed#1072277Input Validation and Logic2021-01-07–37
Sensitive information disclosure to shared access user via streamlabs platform apiAnalysed#1072893Information Disclosure2021-01-20$20036

Subdomains7,102

Subdomains of Logitech
NameScopeFirst seen
rgb-lan.challonge.comNot in the scope2026-11-14
rgc-eh.challonge.comNot in the scope2026-11-14
rgc-higher.challonge.comNot in the scope2026-11-14
rgcasiamini.challonge.comNot in the scope2026-11-14
rgceumini.challonge.comNot in the scope2026-11-14
rgcmemini.challonge.comNot in the scope2026-11-14
rgcsamini.challonge.comNot in the scope2026-11-14
rgcsaminic.challonge.comNot in the scope2026-11-14
rgcsarpg.challonge.comNot in the scope2026-11-14
rgcsarpgmix.challonge.comNot in the scope2026-11-14
rgcsarpgtours.challonge.comNot in the scope2026-11-14
rglgg.challonge.comNot in the scope2026-11-14
rgsa.challonge.comNot in the scope2026-11-14
rgtsmashclash.challonge.comNot in the scope2026-11-14
rhc.challonge.comNot in the scope2026-11-14
rhl.challonge.comNot in the scope2026-11-14
rhs-arcade.challonge.comNot in the scope2026-11-14
rhsgamingclub.challonge.comNot in the scope2026-11-14
rifc.challonge.comNot in the scope2026-11-14
riksrealm.challonge.comNot in the scope2026-11-14
rising-assassins.challonge.comNot in the scope2026-11-14
risingtides.challonge.comNot in the scope2026-11-14
risklegacytournaments.challonge.comNot in the scope2026-11-14
ritfgc.challonge.comNot in the scope2026-11-14
ritsmash.challonge.comNot in the scope2026-11-14
rivals.challonge.comNot in the scope2026-11-14
rivalsde.challonge.comNot in the scope2026-11-14
rivalsofaetheraustralia.challonge.comNot in the scope2026-11-14
rivalsrecess.challonge.comNot in the scope2026-11-14
rivne.challonge.comNot in the scope2026-11-14
rizegaming.challonge.comNot in the scope2026-11-14
rkad.challonge.comNot in the scope2026-11-14
rkyfgc.challonge.comNot in the scope2026-11-14
rlindonesia.challonge.comNot in the scope2026-11-14
rlsa.challonge.comNot in the scope2026-11-14
rltrturnuvalari.challonge.comNot in the scope2026-11-14
rlxo.challonge.comNot in the scope2026-11-14
rmct.challonge.comNot in the scope2026-11-14
rnts.challonge.comNot in the scope2026-11-14
roa-spain.challonge.comNot in the scope2026-11-14
roadoubles.challonge.comNot in the scope2026-11-14
roadtoevoburstlimit.challonge.comNot in the scope2026-11-14
roaeurope.challonge.comNot in the scope2026-11-14
roalocals.challonge.comNot in the scope2026-11-14
roame.challonge.comNot in the scope2026-11-14
roanokefgc.challonge.comNot in the scope2026-11-14
roapt.challonge.comNot in the scope2026-11-14
roboleague.challonge.comNot in the scope2026-11-14
robopartans.challonge.comNot in the scope2026-11-14
robotesports.challonge.comNot in the scope2026-11-14
rocet.challonge.comNot in the scope2026-11-14
rochesterfgc.challonge.comNot in the scope2026-11-14
rockemsockem.challonge.comNot in the scope2026-11-14
rocketjumpzone.challonge.comNot in the scope2026-11-14
rocketleagueparty.challonge.comNot in the scope2026-11-14
rockletztv.challonge.comNot in the scope2026-11-14
rockymount.challonge.comNot in the scope2026-11-14
rockyprep.challonge.comNot in the scope2026-11-14
rocnysmash.challonge.comNot in the scope2026-11-14
rodrichile.challonge.comNot in the scope2026-11-14
roemea.challonge.comNot in the scope2026-11-14
rof1.challonge.comNot in the scope2026-11-14
rof2scv.challonge.comNot in the scope2026-11-14
rof3.challonge.comNot in the scope2026-11-14
roff.challonge.comNot in the scope2026-11-14
rofl.challonge.comNot in the scope2026-11-14
rog.challonge.comNot in the scope2026-11-14
roitoly.challonge.comNot in the scope2026-11-14
rollasmash.challonge.comNot in the scope2026-11-14
rollingindough.challonge.comNot in the scope2026-11-14
rolltier.challonge.comNot in the scope2026-11-14
rolltier6.challonge.comNot in the scope2026-11-14
rome2liga.challonge.comNot in the scope2026-11-14
romx.challonge.comNot in the scope2026-11-14
ronshouseone.challonge.comNot in the scope2026-11-14
roo.challonge.comNot in the scope2026-11-14
roofball1515.challonge.comNot in the scope2026-11-14
roren.challonge.comNot in the scope2026-11-14
rorme.challonge.comNot in the scope2026-11-14
rorosvolley.challonge.comNot in the scope2026-11-14
rotm.challonge.comNot in the scope2026-11-14
rotm2.challonge.comNot in the scope2026-11-14
roughnex.challonge.comNot in the scope2026-11-14
round-robin.challonge.comNot in the scope2026-11-14
round1.challonge.comNot in the scope2026-11-14
round1ko.challonge.comNot in the scope2026-11-14
roundrobin.challonge.comNot in the scope2026-11-14
rowanssbm.challonge.comNot in the scope2026-11-14
roweyfaf.challonge.comNot in the scope2026-11-14
royalchampions.challonge.comNot in the scope2026-11-14
royaldarts.challonge.comNot in the scope2026-11-14
rpimelee.challonge.comNot in the scope2026-11-14
rpleague.challonge.comNot in the scope2026-11-14
rpltx.challonge.comNot in the scope2026-11-14
rpma.challonge.comNot in the scope2026-11-14
rpssmash.challonge.comNot in the scope2026-11-14
rsdseries.challonge.comNot in the scope2026-11-14
rsie.challonge.comNot in the scope2026-11-14
rslsc2.challonge.comNot in the scope2026-11-14
rtcw.challonge.comNot in the scope2026-11-14

1,405 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.