Skip to content

Bug bounty program

Platform
HackerOne
Bounties
Pays
Assets in scope
86
Disclosed reports
15
Subdomains
7,102
Vendor on CyberSIXT
Logitech (26 CVEs, 0 exploited)

Most upvoted reports15

All reports
Most upvoted reports of Logitech
ReportWeaknessDisclosedBountyVotes
One Click Account takeover using Ouath CSRF bypass by adding Null byte %00 in state parameter on www.streamlabs.comAnalysed#1046630Cross-Site Request Forgery2021-01-06–99
Manipulating response leads to free access to Streamlabs PrimeAnalysed#1070510Input Validation and Logic2021-01-21–80
Stored XSS in [https://streamlabs.com/dashboard#/*goal] pagesAnalysed#1049012Cross-site Scripting2020-12-26–68
IDOR when creating App on [platform.streamlabs.com/api/v1/store/whitelist] with user_id fieldAnalysed#983070Insecure Direct Object Reference2020-11-26–61
session takeover via open protocol redirection on streamlabs.comAnalysed#1178239Open Redirect2021-09-01$20050
CSRF in changing users donation_settings [https://streamlabs.com/api/v6/viewer-portal/viewer-settings/donation_settings]Analysed#1049360Cross-Site Request Forgery2020-12-26–49
SSRF allows reading AWS EC2 metadata using "readapi" variable in Streamlabs CloudbotAnalysed#1108418Server-Side Request Forgery2021-02-24$20041
Privilege Escalation Leads to Control The Owner Access Token Which leads to control the stream [streamlabs.com]Analysed#1174527Access Control2021-04-27–38
Host Header injection in oslo.io (using X-Forwarded-For header) leading to email spoofingAnalysed#1072277Input Validation and Logic2021-01-07–37
Sensitive information disclosure to shared access user via streamlabs platform apiAnalysed#1072893Information Disclosure2021-01-20$20036

Subdomains7,102

Subdomains of Logitech
NameScopeFirst seen
rtf3ds.challonge.comNot in the scope2026-11-14
rtgesports.challonge.comNot in the scope2026-11-14
rtp.challonge.comNot in the scope2026-11-14
rts-sanctuary.challonge.comNot in the scope2026-11-14
rttregt34.challonge.comNot in the scope2026-11-14
ru1984.challonge.comNot in the scope2026-11-14
rubyesports.challonge.comNot in the scope2026-11-14
rugwent.challonge.comNot in the scope2026-11-14
ruitv.challonge.comNot in the scope2026-11-14
rujka.challonge.comNot in the scope2026-11-14
rumb.challonge.comNot in the scope2026-11-14
www.rumb.challonge.comNot in the scope2026-11-14
rumblefighterna.challonge.comNot in the scope2026-11-14
runback.challonge.comNot in the scope2026-11-14
ruse.challonge.comNot in the scope2026-11-14
rushohioarms.challonge.comNot in the scope2026-11-14
ruvauf.challonge.comNot in the scope2026-11-14
rvabackyard.challonge.comNot in the scope2026-11-14
rvaforge.challonge.comNot in the scope2026-11-14
rvl.challonge.comNot in the scope2026-11-14
rwshouston.challonge.comNot in the scope2026-11-14
rxt.challonge.comNot in the scope2026-11-14
ryc.challonge.comNot in the scope2026-11-14
ryersonsmash.challonge.comNot in the scope2026-11-14
rylgaruda.challonge.comNot in the scope2026-11-14
ryzecm.challonge.comNot in the scope2026-11-14
s524.challonge.comNot in the scope2026-11-14
sa-global-tournament.challonge.comNot in the scope2026-11-14
sa-rpg-tours.challonge.comNot in the scope2026-11-14
sa-td.challonge.comNot in the scope2026-11-14
sa-torneos.challonge.comNot in the scope2026-11-14
sab.challonge.comNot in the scope2026-11-14
sabado4fun.challonge.comNot in the scope2026-11-14
saberlegendspr.challonge.comNot in the scope2026-11-14
saberlegion.challonge.comNot in the scope2026-11-14
sabotage.challonge.comNot in the scope2026-11-14
sadx.challonge.comNot in the scope2026-11-14
safgc2015.challonge.comNot in the scope2026-11-14
safgc2016.challonge.comNot in the scope2026-11-14
sagemantis.challonge.comNot in the scope2026-11-14
sai.challonge.comNot in the scope2026-11-14
sai2017.challonge.comNot in the scope2026-11-14
saigonfgc.challonge.comNot in the scope2026-11-14
saintlouislanturns.challonge.comNot in the scope2026-11-14
saints.challonge.comNot in the scope2026-11-14
saiyancraft.challonge.comNot in the scope2026-11-14
sakhfight.challonge.comNot in the scope2026-11-14
sakuragakuinlatinoamerica.challonge.comNot in the scope2026-11-14
salemsmallersmashfests.challonge.comNot in the scope2026-11-14
salemsmashfests.challonge.comNot in the scope2026-11-14
salinesmash.challonge.comNot in the scope2026-11-14
salt-d-league.challonge.comNot in the scope2026-11-14
saltfactory.challonge.comNot in the scope2026-11-14
saltpatrolblazblue.challonge.comNot in the scope2026-11-14
saltpatrolpokken.challonge.comNot in the scope2026-11-14
saltpatrolsmash.challonge.comNot in the scope2026-11-14
saltpatroluniest.challonge.comNot in the scope2026-11-14
saltv.challonge.comNot in the scope2026-11-14
salty-ssbu-tournaments.challonge.comNot in the scope2026-11-14
saltycellar.challonge.comNot in the scope2026-11-14
saltyeu.challonge.comNot in the scope2026-11-14
saltygamingshow.challonge.comNot in the scope2026-11-14
saltymelee.challonge.comNot in the scope2026-11-14
saltymeleemondays.challonge.comNot in the scope2026-11-14
saltyplains.challonge.comNot in the scope2026-11-14
saltyplayground.challonge.comNot in the scope2026-11-14
saltysmash.challonge.comNot in the scope2026-11-14
saltysmashsaturdays.challonge.comNot in the scope2026-11-14
salukisv.challonge.comNot in the scope2026-11-14
salute.challonge.comNot in the scope2026-11-14
samurai.challonge.comNot in the scope2026-11-14
sanantoniomelee.challonge.comNot in the scope2026-11-14
sanctamariacollege.challonge.comNot in the scope2026-11-14
sanctifiedgg.challonge.comNot in the scope2026-11-14
sanctumseis2.challonge.comNot in the scope2026-11-14
sandbox.challonge.comtestNot in the scope2026-11-14
sanduskysmash.challonge.comNot in the scope2026-11-14
sanlan.challonge.comNot in the scope2026-11-14
sanmarcos.challonge.comNot in the scope2026-11-14
santasmash2013.challonge.comNot in the scope2026-11-14
sapsweekly.challonge.comNot in the scope2026-11-14
sarpgmix.challonge.comNot in the scope2026-11-14
sasasasasasasasasasa.challonge.comNot in the scope2026-11-14
sasmash.challonge.comNot in the scope2026-11-14
saspin.challonge.comNot in the scope2026-11-14
sasundaycup.challonge.comNot in the scope2026-11-14
sat.challonge.comNot in the scope2026-11-14
satc.challonge.comNot in the scope2026-11-14
satellitegaming.challonge.comNot in the scope2026-11-14
satgg.challonge.comNot in the scope2026-11-14
satl.challonge.comNot in the scope2026-11-14
satourschampionships.challonge.comNot in the scope2026-11-14
saturdaymorningcoffee.challonge.comNot in the scope2026-11-14
sauerduels.challonge.comNot in the scope2026-11-14
sauerleague.challonge.comNot in the scope2026-11-14
sbaleague.challonge.comNot in the scope2026-11-14
sbandalucia.challonge.comNot in the scope2026-11-14
sbilsnooker.challonge.comNot in the scope2026-11-14
sbit.challonge.comNot in the scope2026-11-14
sbpt.challonge.comNot in the scope2026-11-14

1,405 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.