Skip to content

Bug bounty program

Platform
HackerOne
Bounties
Pays
Assets in scope
86
Disclosed reports
15
Subdomains
7,102
Vendor on CyberSIXT
Logitech (26 CVEs, 0 exploited)

Most upvoted reports15

All reports
Most upvoted reports of Logitech
ReportWeaknessDisclosedBountyVotes
One Click Account takeover using Ouath CSRF bypass by adding Null byte %00 in state parameter on www.streamlabs.comAnalysed#1046630Cross-Site Request Forgery2021-01-06–99
Manipulating response leads to free access to Streamlabs PrimeAnalysed#1070510Input Validation and Logic2021-01-21–80
Stored XSS in [https://streamlabs.com/dashboard#/*goal] pagesAnalysed#1049012Cross-site Scripting2020-12-26–68
IDOR when creating App on [platform.streamlabs.com/api/v1/store/whitelist] with user_id fieldAnalysed#983070Insecure Direct Object Reference2020-11-26–61
session takeover via open protocol redirection on streamlabs.comAnalysed#1178239Open Redirect2021-09-01$20050
CSRF in changing users donation_settings [https://streamlabs.com/api/v6/viewer-portal/viewer-settings/donation_settings]Analysed#1049360Cross-Site Request Forgery2020-12-26–49
SSRF allows reading AWS EC2 metadata using "readapi" variable in Streamlabs CloudbotAnalysed#1108418Server-Side Request Forgery2021-02-24$20041
Privilege Escalation Leads to Control The Owner Access Token Which leads to control the stream [streamlabs.com]Analysed#1174527Access Control2021-04-27–38
Host Header injection in oslo.io (using X-Forwarded-For header) leading to email spoofingAnalysed#1072277Input Validation and Logic2021-01-07–37
Sensitive information disclosure to shared access user via streamlabs platform apiAnalysed#1072893Information Disclosure2021-01-20$20036

Subdomains7,102

Subdomains of Logitech
NameScopeFirst seen
springfighter.challonge.comNot in the scope2026-11-14
springfist.challonge.comNot in the scope2026-11-14
springsmash2012.challonge.comNot in the scope2026-11-14
spriteclub.challonge.comNot in the scope2026-11-14
sq.challonge.comNot in the scope2026-11-14
sq-sq.challonge.comNot in the scope2026-11-14
squash-team-atos.challonge.comNot in the scope2026-11-14
squash-team-nokia.challonge.comNot in the scope2026-11-14
squashbodyklubben.challonge.comNot in the scope2026-11-14
squashpark.challonge.comNot in the scope2026-11-14
squidrunslive.challonge.comNot in the scope2026-11-14
squidsg.challonge.comNot in the scope2026-11-14
sr-masters.challonge.comNot in the scope2026-11-14
sr-saltwars.challonge.comNot in the scope2026-11-14
sr-xtl.challonge.comNot in the scope2026-11-14
srbende.challonge.comNot in the scope2026-11-14
srcircuit.challonge.comNot in the scope2026-11-14
srfgc.challonge.comNot in the scope2026-11-14
srk.challonge.comNot in the scope2026-11-14
srksb.challonge.comNot in the scope2026-11-14
srkuw.challonge.comNot in the scope2026-11-14
srljam.challonge.comNot in the scope2026-11-14
srs.challonge.comNot in the scope2026-11-14
srs-ranked.challonge.comNot in the scope2026-11-14
ssb4midlands.challonge.comNot in the scope2026-11-14
ssb64discord-netplay.challonge.comNot in the scope2026-11-14
ssb64eu.challonge.comNot in the scope2026-11-14
ssbht.challonge.comNot in the scope2026-11-14
ssbmtl.challonge.comNot in the scope2026-11-14
ssbqc.challonge.comNot in the scope2026-11-14
ssbs.challonge.comNot in the scope2026-11-14
ssbsherbrooke.challonge.comNot in the scope2026-11-14
ssbsouthshore.challonge.comNot in the scope2026-11-14
ssbuburningtime.challonge.comNot in the scope2026-11-14
ssbufullthrottle.challonge.comNot in the scope2026-11-14
ssdepismash.challonge.comNot in the scope2026-11-14
ssgirlsbasketball.challonge.comNot in the scope2026-11-14
ssig.challonge.comNot in the scope2026-11-14
ssl.challonge.comNot in the scope2026-11-14
sslsmash.challonge.comNot in the scope2026-11-14
ssopen.challonge.comNot in the scope2026-11-14
ssrcg.challonge.comNot in the scope2026-11-14
sssmackdown.challonge.comNot in the scope2026-11-14
sssmash.challonge.comNot in the scope2026-11-14
ssto.challonge.comNot in the scope2026-11-14
sstssf2.challonge.comNot in the scope2026-11-14
ssv.challonge.comNot in the scope2026-11-14
stadiumbuilds.challonge.comNot in the scope2026-11-14
stadiumgaming.challonge.comNot in the scope2026-11-14
stadtmeisterschaft-pool-2016.challonge.comNot in the scope2026-11-14
stadtmeisterschaft-pool-2017.challonge.comNot in the scope2026-11-14
stadtmeisterschaft-pool-2018.challonge.comNot in the scope2026-11-14
staff-pl.challonge.cominternalNot in the scope2026-11-14
staffsit.challonge.comNot in the scope2026-11-14
staffssmash.challonge.comNot in the scope2026-11-14
staffsvgs.challonge.comNot in the scope2026-11-14
staging.challonge.comstagingNot in the scope2026-11-14
staging-assets.challonge.comstagingNot in the scope2026-11-14
es-node.1.uc-sgp-app1.staging.challonge.comstagingNot in the scope2026-11-14
staging2.challonge.comstagingNot in the scope2026-11-14
master.staging2.challonge.comstagingNot in the scope2026-11-14
standingfierce.challonge.comNot in the scope2026-11-14
standingfierceonlineleague.challonge.comNot in the scope2026-11-14
standingfiercetournamentbrackets.challonge.comNot in the scope2026-11-14
stankmixx.challonge.comNot in the scope2026-11-14
starbasearcade.challonge.comNot in the scope2026-11-14
starcade.challonge.comNot in the scope2026-11-14
starcitizencompetitivecombatclub.challonge.comNot in the scope2026-11-14
starcraftitalia.challonge.comNot in the scope2026-11-14
starcuposm.challonge.comNot in the scope2026-11-14
stardustleague.challonge.comNot in the scope2026-11-14
starhashleague.challonge.comNot in the scope2026-11-14
starheroes.challonge.comNot in the scope2026-11-14
starpoweredgaming.challonge.comNot in the scope2026-11-14
starrealmsftl.challonge.comNot in the scope2026-11-14
startgame.challonge.comNot in the scope2026-11-14
status.challonge.commonitoringNot in the scope2026-11-14
steamtournaments.challonge.comNot in the scope2026-11-14
steelcitybg.challonge.comNot in the scope2026-11-14
steelcityclash.challonge.comNot in the scope2026-11-14
steelcitylan.challonge.comNot in the scope2026-11-14
stepitup.challonge.comNot in the scope2026-11-14
stevens.challonge.comNot in the scope2026-11-14
steveycat.challonge.comNot in the scope2026-11-14
stier.challonge.comNot in the scope2026-11-14
stillaliv.challonge.comNot in the scope2026-11-14
stillalive.challonge.comNot in the scope2026-11-14
stlbarwarz.challonge.comNot in the scope2026-11-14
stlfoosball.challonge.comNot in the scope2026-11-14
stlmelee.challonge.comNot in the scope2026-11-14
stockcancelgaming.challonge.comNot in the scope2026-11-14
stocktonsmash.challonge.comNot in the scope2026-11-14
stofftiere.challonge.comNot in the scope2026-11-14
stormarmada.challonge.comNot in the scope2026-11-14
stormkingsde.challonge.comNot in the scope2026-11-14
stpoftheletmesee.challonge.comNot in the scope2026-11-14
strangetourney.challonge.comNot in the scope2026-11-14
stratus.challonge.comNot in the scope2026-11-14
stream.challonge.comNot in the scope2026-11-14
streamersconnected.challonge.comNot in the scope2026-11-14

1,405 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.