Skip to content

Bug bounty program

Platform
HackerOne
Bounties
Pays
Assets in scope
86
Disclosed reports
15
Subdomains
7,102
Vendor on CyberSIXT
Logitech (26 CVEs, 0 exploited)

Most upvoted reports15

All reports
Most upvoted reports of Logitech
ReportWeaknessDisclosedBountyVotes
One Click Account takeover using Ouath CSRF bypass by adding Null byte %00 in state parameter on www.streamlabs.comAnalysed#1046630Cross-Site Request Forgery2021-01-06–99
Manipulating response leads to free access to Streamlabs PrimeAnalysed#1070510Input Validation and Logic2021-01-21–80
Stored XSS in [https://streamlabs.com/dashboard#/*goal] pagesAnalysed#1049012Cross-site Scripting2020-12-26–68
IDOR when creating App on [platform.streamlabs.com/api/v1/store/whitelist] with user_id fieldAnalysed#983070Insecure Direct Object Reference2020-11-26–61
session takeover via open protocol redirection on streamlabs.comAnalysed#1178239Open Redirect2021-09-01$20050
CSRF in changing users donation_settings [https://streamlabs.com/api/v6/viewer-portal/viewer-settings/donation_settings]Analysed#1049360Cross-Site Request Forgery2020-12-26–49
SSRF allows reading AWS EC2 metadata using "readapi" variable in Streamlabs CloudbotAnalysed#1108418Server-Side Request Forgery2021-02-24$20041
Privilege Escalation Leads to Control The Owner Access Token Which leads to control the stream [streamlabs.com]Analysed#1174527Access Control2021-04-27–38
Host Header injection in oslo.io (using X-Forwarded-For header) leading to email spoofingAnalysed#1072277Input Validation and Logic2021-01-07–37
Sensitive information disclosure to shared access user via streamlabs platform apiAnalysed#1072893Information Disclosure2021-01-20$20036

Subdomains7,102

Subdomains of Logitech
NameScopeFirst seen
sfv-onlinewarrior.challonge.comNot in the scope2026-11-14
sfvietnam.challonge.comNot in the scope2026-11-14
sfvnoobonline.challonge.comNot in the scope2026-11-14
sfwarriors.challonge.comNot in the scope2026-11-14
sfxtdiscord.challonge.comNot in the scope2026-11-14
sg.challonge.comNot in the scope2026-11-14
sgeleague.challonge.comNot in the scope2026-11-14
sges.challonge.comNot in the scope2026-11-14
sgl.challonge.comNot in the scope2026-11-14
sgla.challonge.comNot in the scope2026-11-14
sglasia.challonge.comNot in the scope2026-11-14
sgm.challonge.comNot in the scope2026-11-14
sgmajors.challonge.comNot in the scope2026-11-14
sgmelee.challonge.comNot in the scope2026-11-14
sgnn.challonge.comNot in the scope2026-11-14
sgpm.challonge.comNot in the scope2026-11-14
sgtsmash.challonge.comNot in the scope2026-11-14
shadowou.challonge.comNot in the scope2026-11-14
shawneesmash.challonge.comNot in the scope2026-11-14
shawnlinder.challonge.comNot in the scope2026-11-14
sheepkeyseu.challonge.comNot in the scope2026-11-14
shefsmashuk.challonge.comNot in the scope2026-11-14
sheridansmash.challonge.comNot in the scope2026-11-14
shevytest.challonge.comNot in the scope2026-11-14
shffl.challonge.comNot in the scope2026-11-14
shieldbreakers.challonge.comNot in the scope2026-11-14
shinepm.challonge.comNot in the scope2026-11-14
shinrahq.challonge.comNot in the scope2026-11-14
shkrelicord.challonge.comNot in the scope2026-11-14
shoalssmash.challonge.comNot in the scope2026-11-14
shohoq.challonge.comNot in the scope2026-11-14
shorismash4.challonge.comNot in the scope2026-11-14
shotonlinegermany.challonge.comNot in the scope2026-11-14
shotsfiredmelee.challonge.comNot in the scope2026-11-14
showdown.challonge.comNot in the scope2026-11-14
showdownesports.challonge.comNot in the scope2026-11-14
showdowngg.challonge.comNot in the scope2026-11-14
showdownpokemon.challonge.comNot in the scope2026-11-14
shrine.challonge.comNot in the scope2026-11-14
shsracing.challonge.comNot in the scope2026-11-14
shudyjinlee.challonge.comNot in the scope2026-11-14
shulkcord.challonge.comNot in the scope2026-11-14
shutyourplay.challonge.comNot in the scope2026-11-14
sidahossb.challonge.comNot in the scope2026-11-14
sidenetwork.challonge.comNot in the scope2026-11-14
siders.challonge.comNot in the scope2026-11-14
sigmelee.challonge.comNot in the scope2026-11-14
siguldasrobotukauss.challonge.comNot in the scope2026-11-14
sikhgames2016.challonge.comNot in the scope2026-11-14
siliconsmash.challonge.comNot in the scope2026-11-14
silverhun.challonge.comNot in the scope2026-11-14
silvernovacs.challonge.comNot in the scope2026-11-14
simpo.challonge.comNot in the scope2026-11-14
sincitysmash.challonge.comNot in the scope2026-11-14
sinfonia.challonge.comNot in the scope2026-11-14
sinnoh.challonge.comNot in the scope2026-11-14
siouxland.challonge.comNot in the scope2026-11-14
sirocco.challonge.comNot in the scope2026-11-14
sisk.challonge.comNot in the scope2026-11-14
siu.challonge.comNot in the scope2026-11-14
sixnations2018.challonge.comNot in the scope2026-11-14
sjg.challonge.comNot in the scope2026-11-14
sjrs.challonge.comNot in the scope2026-11-14
sjsumelee.challonge.comNot in the scope2026-11-14
sju.challonge.comNot in the scope2026-11-14
sk.challonge.comNot in the scope2026-11-14
skillgrills.challonge.comNot in the scope2026-11-14
skillions.challonge.comNot in the scope2026-11-14
skillshot.challonge.comNot in the scope2026-11-14
skl.challonge.comNot in the scope2026-11-14
sklbatpc.challonge.comNot in the scope2026-11-14
sknm.challonge.comNot in the scope2026-11-14
sknpm.challonge.comNot in the scope2026-11-14
skullbatseu.challonge.comNot in the scope2026-11-14
skullgirlssolo.challonge.comNot in the scope2026-11-14
skynet-esports.challonge.comNot in the scope2026-11-14
slapcity.challonge.comNot in the scope2026-11-14
slapcityoce.challonge.comNot in the scope2026-11-14
slaughter-2.challonge.comNot in the scope2026-11-14
slcn.challonge.comNot in the scope2026-11-14
slcompetitive.challonge.comNot in the scope2026-11-14
sleepyhollowdiscord.challonge.comNot in the scope2026-11-14
sleepytown.challonge.comNot in the scope2026-11-14
slgamingcon.challonge.comNot in the scope2026-11-14
slileague.challonge.comNot in the scope2026-11-14
slosmash.challonge.comNot in the scope2026-11-14
slr.challonge.comNot in the scope2026-11-14
sluhmelee.challonge.comNot in the scope2026-11-14
slusmash.challonge.comNot in the scope2026-11-14
sm4shcentral.challonge.comNot in the scope2026-11-14
sm4shhandheld.challonge.comNot in the scope2026-11-14
sm4shll.challonge.comNot in the scope2026-11-14
sm4shnight.challonge.comNot in the scope2026-11-14
sm4shwiregrass.challonge.comNot in the scope2026-11-14
sm64.challonge.comNot in the scope2026-11-14
smadness.challonge.comNot in the scope2026-11-14
smartbargaming.challonge.comNot in the scope2026-11-14
smash-escom.challonge.comNot in the scope2026-11-14
smash-generations.challonge.comNot in the scope2026-11-14
smash-room.challonge.comNot in the scope2026-11-14

1,405 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.