Skip to content

Bug bounty program

Platform
HackerOne
Bounties
Pays
Assets in scope
86
Disclosed reports
15
Subdomains
7,102
Vendor on CyberSIXT
Logitech (26 CVEs, 0 exploited)

Most upvoted reports15

All reports
Most upvoted reports of Logitech
ReportWeaknessDisclosedBountyVotes
One Click Account takeover using Ouath CSRF bypass by adding Null byte %00 in state parameter on www.streamlabs.comAnalysed#1046630Cross-Site Request Forgery2021-01-06–99
Manipulating response leads to free access to Streamlabs PrimeAnalysed#1070510Input Validation and Logic2021-01-21–80
Stored XSS in [https://streamlabs.com/dashboard#/*goal] pagesAnalysed#1049012Cross-site Scripting2020-12-26–68
IDOR when creating App on [platform.streamlabs.com/api/v1/store/whitelist] with user_id fieldAnalysed#983070Insecure Direct Object Reference2020-11-26–61
session takeover via open protocol redirection on streamlabs.comAnalysed#1178239Open Redirect2021-09-01$20050
CSRF in changing users donation_settings [https://streamlabs.com/api/v6/viewer-portal/viewer-settings/donation_settings]Analysed#1049360Cross-Site Request Forgery2020-12-26–49
SSRF allows reading AWS EC2 metadata using "readapi" variable in Streamlabs CloudbotAnalysed#1108418Server-Side Request Forgery2021-02-24$20041
Privilege Escalation Leads to Control The Owner Access Token Which leads to control the stream [streamlabs.com]Analysed#1174527Access Control2021-04-27–38
Host Header injection in oslo.io (using X-Forwarded-For header) leading to email spoofingAnalysed#1072277Input Validation and Logic2021-01-07–37
Sensitive information disclosure to shared access user via streamlabs platform apiAnalysed#1072893Information Disclosure2021-01-20$20036

Subdomains7,102

Subdomains of Logitech
NameScopeFirst seen
streetabilizei.challonge.comNot in the scope2026-11-14
streetxsyndicate.challonge.comNot in the scope2026-11-14
strevival.challonge.comNot in the scope2026-11-14
strifehq.challonge.comNot in the scope2026-11-14
strifesg.challonge.comNot in the scope2026-11-14
stsbattles.challonge.comNot in the scope2026-11-14
stultimate.challonge.comNot in the scope2026-11-14
stunfest2015.challonge.comNot in the scope2026-11-14
subdomain.challonge.comNot in the scope2026-11-14
subsmash.challonge.comNot in the scope2026-11-14
sudodreamteam.challonge.comNot in the scope2026-11-14
sugamocup.challonge.comNot in the scope2026-11-14
sugarbuncup.challonge.comNot in the scope2026-11-14
sugoifactory.challonge.comNot in the scope2026-11-14
sundaesplat.challonge.comNot in the scope2026-11-14
sundayfaceoff.challonge.comNot in the scope2026-11-14
sundaygeekhype.challonge.comNot in the scope2026-11-14
sundaynf.challonge.comNot in the scope2026-11-14
sunsetbowl.challonge.comNot in the scope2026-11-14
sunshinestatesquids.challonge.comNot in the scope2026-11-14
supcom2013.challonge.comNot in the scope2026-11-14
super-smash-flash-league.challonge.comNot in the scope2026-11-14
superarcade.challonge.comNot in the scope2026-11-14
superbitcon.challonge.comNot in the scope2026-11-14
superbrawlq.challonge.comNot in the scope2026-11-14
supercup.challonge.comNot in the scope2026-11-14
supermetroid.challonge.comNot in the scope2026-11-14
supershow.challonge.comNot in the scope2026-11-14
supersmashbroscordoba.challonge.comNot in the scope2026-11-14
supersmashcon.challonge.comNot in the scope2026-11-14
supersmashnerds.challonge.comNot in the scope2026-11-14
supersmashnoles.challonge.comNot in the scope2026-11-14
supersweet.challonge.comNot in the scope2026-11-14
superteatime.challonge.comNot in the scope2026-11-14
superzeros.challonge.comNot in the scope2026-11-14
supman.challonge.comNot in the scope2026-11-14
supr.challonge.comNot in the scope2026-11-14
supremel.challonge.comNot in the scope2026-11-14
surfcityslam.challonge.comNot in the scope2026-11-14
surfive.challonge.comNot in the scope2026-11-14
sushiflex.challonge.comNot in the scope2026-11-14
susmash.challonge.comNot in the scope2026-11-14
svg.challonge.comNot in the scope2026-11-14
svvamp.challonge.comNot in the scope2026-11-14
swagtour.challonge.comNot in the scope2026-11-14
swanstonstsmash.challonge.comNot in the scope2026-11-14
swatnation.challonge.comNot in the scope2026-11-14
swbfgamers.challonge.comNot in the scope2026-11-14
swdestiny.challonge.comNot in the scope2026-11-14
sweetpatchtv.challonge.comNot in the scope2026-11-14
sweetprologue.challonge.comNot in the scope2026-11-14
sweetspot.challonge.comNot in the scope2026-11-14
swg.challonge.comNot in the scope2026-11-14
swg2016.challonge.comNot in the scope2026-11-14
swimsanity.challonge.comNot in the scope2026-11-14
switchgamelobby.challonge.comNot in the scope2026-11-14
switzerlandvsswedenlivestreamhockey.challonge.comNot in the scope2026-11-14
swoc.challonge.comNot in the scope2026-11-14
swpa-ssbm.challonge.comNot in the scope2026-11-14
sxc2k14.challonge.comNot in the scope2026-11-14
sxc2k15.challonge.comNot in the scope2026-11-14
sxc2k16.challonge.comNot in the scope2026-11-14
sxu.challonge.comNot in the scope2026-11-14
sycamoresmash.challonge.comNot in the scope2026-11-14
sydarth.challonge.comNot in the scope2026-11-14
sydneysalottoseries.challonge.comNot in the scope2026-11-14
sydneysmash.challonge.comNot in the scope2026-11-14
synga.challonge.comNot in the scope2026-11-14
synrg.challonge.comNot in the scope2026-11-14
syostournaments.challonge.comNot in the scope2026-11-14
sypherphoenix.challonge.comNot in the scope2026-11-14
syracusesmash.challonge.comNot in the scope2026-11-14
szenelan.challonge.comNot in the scope2026-11-14
t2dojo.challonge.comNot in the scope2026-11-14
t3drafts.challonge.comNot in the scope2026-11-14
tabernaps4.challonge.comNot in the scope2026-11-14
tabletoptheory.challonge.comNot in the scope2026-11-14
tacticalriotgaming.challonge.comNot in the scope2026-11-14
taflan.challonge.comNot in the scope2026-11-14
tagsh.challonge.comNot in the scope2026-11-14
taintedminds.challonge.comNot in the scope2026-11-14
taj7aib139.challonge.comNot in the scope2026-11-14
tak.challonge.comNot in the scope2026-11-14
tak-games.challonge.comNot in the scope2026-11-14
takashiuchiyamavsjezreelcorraleslivestream.challonge.comNot in the scope2026-11-14
takeoversmash.challonge.comNot in the scope2026-11-14
talesofjank.challonge.comNot in the scope2026-11-14
tallahasseemelee.challonge.comNot in the scope2026-11-14
tallonv.challonge.comNot in the scope2026-11-14
tambassade.challonge.comNot in the scope2026-11-14
tampaspicyspot.challonge.comNot in the scope2026-11-14
tamurufsmashbros.challonge.comNot in the scope2026-11-14
tankide.challonge.comNot in the scope2026-11-14
tantusar.challonge.comNot in the scope2026-11-14
targ.challonge.comNot in the scope2026-11-14
tarheelll11-12yo.challonge.comNot in the scope2026-11-14
tarheelll9-10yo.challonge.comNot in the scope2026-11-14
tartarus.challonge.comNot in the scope2026-11-14
tartarusauth.challonge.comNot in the scope2026-11-14
taskforcebravo.challonge.comNot in the scope2026-11-14

1,405 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.