Skip to content

Bug bounty program

Platform
HackerOne
Bounties
Pays
Assets in scope
86
Disclosed reports
15
Subdomains
7,102
Vendor on CyberSIXT
Logitech (26 CVEs, 0 exploited)

Most upvoted reports15

All reports
Most upvoted reports of Logitech
ReportWeaknessDisclosedBountyVotes
One Click Account takeover using Ouath CSRF bypass by adding Null byte %00 in state parameter on www.streamlabs.comAnalysed#1046630Cross-Site Request Forgery2021-01-06–99
Manipulating response leads to free access to Streamlabs PrimeAnalysed#1070510Input Validation and Logic2021-01-21–80
Stored XSS in [https://streamlabs.com/dashboard#/*goal] pagesAnalysed#1049012Cross-site Scripting2020-12-26–68
IDOR when creating App on [platform.streamlabs.com/api/v1/store/whitelist] with user_id fieldAnalysed#983070Insecure Direct Object Reference2020-11-26–61
session takeover via open protocol redirection on streamlabs.comAnalysed#1178239Open Redirect2021-09-01$20050
CSRF in changing users donation_settings [https://streamlabs.com/api/v6/viewer-portal/viewer-settings/donation_settings]Analysed#1049360Cross-Site Request Forgery2020-12-26–49
SSRF allows reading AWS EC2 metadata using "readapi" variable in Streamlabs CloudbotAnalysed#1108418Server-Side Request Forgery2021-02-24$20041
Privilege Escalation Leads to Control The Owner Access Token Which leads to control the stream [streamlabs.com]Analysed#1174527Access Control2021-04-27–38
Host Header injection in oslo.io (using X-Forwarded-For header) leading to email spoofingAnalysed#1072277Input Validation and Logic2021-01-07–37
Sensitive information disclosure to shared access user via streamlabs platform apiAnalysed#1072893Information Disclosure2021-01-20$20036

Subdomains7,102

Subdomains of Logitech
NameScopeFirst seen
smictf.challonge.comNot in the scope2026-11-14
smite2esports.challonge.comNot in the scope2026-11-14
smitecentral.challonge.comNot in the scope2026-11-14
smiteguru.challonge.comNot in the scope2026-11-14
smiteprime.challonge.comNot in the scope2026-11-14
smitepro.challonge.comNot in the scope2026-11-14
smodyssey.challonge.comNot in the scope2026-11-14
smogon.challonge.comNot in the scope2026-11-14
sms20shines.challonge.comNot in the scope2026-11-14
smsh.challonge.comNot in the scope2026-11-14
smsub.challonge.comNot in the scope2026-11-14
smsunshine.challonge.comNot in the scope2026-11-14
smt.challonge.comNot in the scope2026-11-14
smta.challonge.comNot in the scope2026-11-14
smu5h.challonge.comNot in the scope2026-11-14
smw.challonge.comNot in the scope2026-11-14
smwbrasil.challonge.comNot in the scope2026-11-14
smwgermany.challonge.comNot in the scope2026-11-14
smwracers.challonge.comNot in the scope2026-11-14
smz3.challonge.comNot in the scope2026-11-14
snesports.challonge.comNot in the scope2026-11-14
snesrevwc.challonge.comNot in the scope2026-11-14
snesrevwcteste.challonge.comNot in the scope2026-11-14
snew.challonge.comNot in the scope2026-11-14
sngbatllegarena.challonge.comNot in the scope2026-11-14
sngdotaforum.challonge.comNot in the scope2026-11-14
snipezilla.challonge.comNot in the scope2026-11-14
snoodyboys.challonge.comNot in the scope2026-11-14
snowfur1029catchandevolve.challonge.comNot in the scope2026-11-14
snyphi.challonge.comNot in the scope2026-11-14
soberon333.challonge.comNot in the scope2026-11-14
socalst.challonge.comNot in the scope2026-11-14
socialgaming.challonge.comNot in the scope2026-11-14
sodakcircuit.challonge.comNot in the scope2026-11-14
sofiaitevents.challonge.comNot in the scope2026-11-14
sogeu.challonge.comNot in the scope2026-11-14
sogfr.challonge.comNot in the scope2026-11-14
sokumaidens.challonge.comNot in the scope2026-11-14
solnatk.challonge.comNot in the scope2026-11-14
soloduelistcommunity.challonge.comNot in the scope2026-11-14
solskaliga1617.challonge.comNot in the scope2026-11-14
sompojapantr.challonge.comNot in the scope2026-11-14
sonotoni3q.challonge.comNot in the scope2026-11-14
sooner.challonge.comNot in the scope2026-11-14
sopsquad.challonge.comNot in the scope2026-11-14
sossmash.challonge.comNot in the scope2026-11-14
sothisisaname.challonge.comNot in the scope2026-11-14
soul-ignite.challonge.comNot in the scope2026-11-14
soulchambergaming.challonge.comNot in the scope2026-11-14
soulsborne.challonge.comNot in the scope2026-11-14
source.challonge.comNot in the scope2026-11-14
sourcegaming.challonge.comNot in the scope2026-11-14
www.sourcegaming.challonge.comNot in the scope2026-11-14
southernutahsmash.challonge.comNot in the scope2026-11-14
southernvstulanelivestream.challonge.comNot in the scope2026-11-14
southseattlesmash.challonge.comNot in the scope2026-11-14
southshoregaming.challonge.comNot in the scope2026-11-14
southtown.challonge.comNot in the scope2026-11-14
southyorkshire.challonge.comNot in the scope2026-11-14
sp-tournament.challonge.comNot in the scope2026-11-14
spaceboundleague.challonge.comNot in the scope2026-11-14
spacecoyotegaming.challonge.comNot in the scope2026-11-14
spacetime.challonge.comNot in the scope2026-11-14
spadefox.challonge.comNot in the scope2026-11-14
spaghettishowdown.challonge.comNot in the scope2026-11-14
spaks.challonge.comNot in the scope2026-11-14
spanishmastersseries.challonge.comNot in the scope2026-11-14
sparksgaming.challonge.comNot in the scope2026-11-14
spartanweeklies.challonge.comNot in the scope2026-11-14
spawnkill.challonge.comNot in the scope2026-11-14
spawnquakelive.challonge.comNot in the scope2026-11-14
spd.challonge.comNot in the scope2026-11-14
spdxb.challonge.comNot in the scope2026-11-14
specopsgl.challonge.comNot in the scope2026-11-14
speedball.challonge.comNot in the scope2026-11-14
speedgaming.challonge.comNot in the scope2026-11-14
speedgamingportugues.challonge.comNot in the scope2026-11-14
speedrunslive.challonge.comNot in the scope2026-11-14
speedstermaniacs.challonge.comNot in the scope2026-11-14
spfr.challonge.comNot in the scope2026-11-14
spgl.challonge.comNot in the scope2026-11-14
sphynx.challonge.comNot in the scope2026-11-14
spieltimes.challonge.comNot in the scope2026-11-14
spiralseries.challonge.comNot in the scope2026-11-14
spiritoflifegaming.challonge.comNot in the scope2026-11-14
spiritzero.challonge.comNot in the scope2026-11-14
spirtlock1.challonge.comNot in the scope2026-11-14
splashgaming.challonge.comNot in the scope2026-11-14
splatnhalf.challonge.comNot in the scope2026-11-14
splatooncommunityleague.challonge.comNot in the scope2026-11-14
splatoonpt.challonge.comNot in the scope2026-11-14
spleefleagueofficial.challonge.comNot in the scope2026-11-14
spm.challonge.comNot in the scope2026-11-14
sportstournaments.challonge.comNot in the scope2026-11-14
spring.challonge.comNot in the scope2026-11-14
spring2017.challonge.comNot in the scope2026-11-14
springfieldll10-12yo.challonge.comNot in the scope2026-11-14
springfieldmelee.challonge.comNot in the scope2026-11-14
springfieldpm.challonge.comNot in the scope2026-11-14
springfieldsmash.challonge.comNot in the scope2026-11-14

1,405 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.