Skip to content

Bug bounty program

Platform
HackerOne
Bounties
Pays
Assets in scope
86
Disclosed reports
15
Subdomains
7,102
Vendor on CyberSIXT
Logitech (26 CVEs, 0 exploited)

Most upvoted reports15

All reports
Most upvoted reports of Logitech
ReportWeaknessDisclosedBountyVotes
One Click Account takeover using Ouath CSRF bypass by adding Null byte %00 in state parameter on www.streamlabs.comAnalysed#1046630Cross-Site Request Forgery2021-01-06–99
Manipulating response leads to free access to Streamlabs PrimeAnalysed#1070510Input Validation and Logic2021-01-21–80
Stored XSS in [https://streamlabs.com/dashboard#/*goal] pagesAnalysed#1049012Cross-site Scripting2020-12-26–68
IDOR when creating App on [platform.streamlabs.com/api/v1/store/whitelist] with user_id fieldAnalysed#983070Insecure Direct Object Reference2020-11-26–61
session takeover via open protocol redirection on streamlabs.comAnalysed#1178239Open Redirect2021-09-01$20050
CSRF in changing users donation_settings [https://streamlabs.com/api/v6/viewer-portal/viewer-settings/donation_settings]Analysed#1049360Cross-Site Request Forgery2020-12-26–49
SSRF allows reading AWS EC2 metadata using "readapi" variable in Streamlabs CloudbotAnalysed#1108418Server-Side Request Forgery2021-02-24$20041
Privilege Escalation Leads to Control The Owner Access Token Which leads to control the stream [streamlabs.com]Analysed#1174527Access Control2021-04-27–38
Host Header injection in oslo.io (using X-Forwarded-For header) leading to email spoofingAnalysed#1072277Input Validation and Logic2021-01-07–37
Sensitive information disclosure to shared access user via streamlabs platform apiAnalysed#1072893Information Disclosure2021-01-20$20036

Subdomains7,102

Subdomains of Logitech
NameScopeFirst seen
sbru.challonge.comNot in the scope2026-11-14
sbs1.challonge.comNot in the scope2026-11-14
sbu.challonge.comNot in the scope2026-11-14
sc.challonge.comNot in the scope2026-11-14
sc2by.challonge.comNot in the scope2026-11-14
sc2gg.challonge.comNot in the scope2026-11-14
sc2gg_na_weekly.challonge.comNot in the scope2026-11-14
sc2groupies.challonge.comNot in the scope2026-11-14
sc2norge.challonge.comNot in the scope2026-11-14
sc2swarm.challonge.comNot in the scope2026-11-14
sc4.challonge.comNot in the scope2026-11-14
scarletsmash.challonge.comNot in the scope2026-11-14
scb-murder-cup.challonge.comNot in the scope2026-11-14
sccc.challonge.comNot in the scope2026-11-14
scgn.challonge.comNot in the scope2026-11-14
schkrimpsquad.challonge.comNot in the scope2026-11-14
schoolleaguegaming.challonge.comNot in the scope2026-11-14
schu.challonge.comNot in the scope2026-11-14
scionesports.challonge.comNot in the scope2026-11-14
scj.challonge.comNot in the scope2026-11-14
sclobo.challonge.comNot in the scope2026-11-14
scm.challonge.comgitNot in the scope2026-11-14
scmlb.challonge.comNot in the scope2026-11-14
sco.challonge.comNot in the scope2026-11-14
scooniepennscornhole4cancer.challonge.comNot in the scope2026-11-14
score.challonge.comNot in the scope2026-11-14
scqclbnerds.challonge.comNot in the scope2026-11-14
scredditeu.challonge.comNot in the scope2026-11-14
scrimcentral.challonge.comNot in the scope2026-11-14
scrl.challonge.comNot in the scope2026-11-14
scrubscentral.challonge.comNot in the scope2026-11-14
scrubsport.challonge.comNot in the scope2026-11-14
scs.challonge.comNot in the scope2026-11-14
sct.challonge.comNot in the scope2026-11-14
scusmash.challonge.comNot in the scope2026-11-14
scv.challonge.comNot in the scope2026-11-14
scv4.challonge.comNot in the scope2026-11-14
scvda.challonge.comNot in the scope2026-11-14
scvi-bp.challonge.comNot in the scope2026-11-14
scvrush.challonge.comNot in the scope2026-11-14
scwb.challonge.comNot in the scope2026-11-14
sdasiapacific.challonge.comNot in the scope2026-11-14
sdcola.challonge.comNot in the scope2026-11-14
sdghdfhdfhdfh.challonge.comNot in the scope2026-11-14
sdmanagement.challonge.comNot in the scope2026-11-14
sdmelee.challonge.comNot in the scope2026-11-14
sdos.challonge.comNot in the scope2026-11-14
sdpm.challonge.comNot in the scope2026-11-14
sdr.challonge.comNot in the scope2026-11-14
sdsm4sh.challonge.comNot in the scope2026-11-14
sdtournaments.challonge.comNot in the scope2026-11-14
seaas.challonge.comNot in the scope2026-11-14
seagcxipart1.challonge.comNot in the scope2026-11-14
seam2017.challonge.comNot in the scope2026-11-14
seamm2017.challonge.comNot in the scope2026-11-14
seascraper.challonge.comNot in the scope2026-11-14
seasiamajor.challonge.comNot in the scope2026-11-14
seattletekken.challonge.comNot in the scope2026-11-14
seattlevolleyballclub.challonge.comNot in the scope2026-11-14
seattlevsoaklandlive.challonge.comNot in the scope2026-11-14
sebs.challonge.comNot in the scope2026-11-14
secommunity.challonge.comNot in the scope2026-11-14
secondcircle.challonge.comNot in the scope2026-11-14
secretcraft.challonge.comNot in the scope2026-11-14
secretproject.challonge.comNot in the scope2026-11-14
sector7energy.challonge.comNot in the scope2026-11-14
seda.challonge.comNot in the scope2026-11-14
seededmono.challonge.comNot in the scope2026-11-14
seertv.challonge.comNot in the scope2026-11-14
segundaligasmashonlinemexico.challonge.comNot in the scope2026-11-14
sel.challonge.comNot in the scope2026-11-14
selbulan.challonge.comNot in the scope2026-11-14
sendous.challonge.comNot in the scope2026-11-14
senilafermecata.challonge.comNot in the scope2026-11-14
sensible.challonge.comNot in the scope2026-11-14
serebiiofficialtours.challonge.comNot in the scope2026-11-14
serious-overchill.challonge.comNot in the scope2026-11-14
seriouspoolgoodtimezhsv.challonge.comNot in the scope2026-11-14
seriouszone.challonge.comNot in the scope2026-11-14
services.challonge.comNot in the scope2026-11-14
setanta.challonge.comNot in the scope2026-11-14
setcrew.challonge.comNot in the scope2026-11-14
settleitinsmash.challonge.comNot in the scope2026-11-14
setxfgc.challonge.comNot in the scope2026-11-14
sf2america.challonge.comNot in the scope2026-11-14
sf2sea.challonge.comNot in the scope2026-11-14
sf33scord.challonge.comNot in the scope2026-11-14
sfch.challonge.comNot in the scope2026-11-14
sfcj.challonge.comNot in the scope2026-11-14
sfdiscord.challonge.comNot in the scope2026-11-14
sfet-rgc.challonge.comNot in the scope2026-11-14
sfeu.challonge.comNot in the scope2026-11-14
sfie.challonge.comNot in the scope2026-11-14
sfl-melee.challonge.comNot in the scope2026-11-14
sfo.challonge.comNot in the scope2026-11-14
sforestsmash.challonge.comNot in the scope2026-11-14
sfqualifiers.challonge.comNot in the scope2026-11-14
sfshock.challonge.comNot in the scope2026-11-14
sfv-fca.challonge.comNot in the scope2026-11-14
sfv-fca2.challonge.comNot in the scope2026-11-14

1,405 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.