Skip to content

Bug bounty program

Platform
HackerOne
Bounties
Pays
Assets in scope
86
Disclosed reports
15
Subdomains
7,102
Vendor on CyberSIXT
Logitech (26 CVEs, 0 exploited)

Most upvoted reports15

All reports
Most upvoted reports of Logitech
ReportWeaknessDisclosedBountyVotes
One Click Account takeover using Ouath CSRF bypass by adding Null byte %00 in state parameter on www.streamlabs.comAnalysed#1046630Cross-Site Request Forgery2021-01-06–99
Manipulating response leads to free access to Streamlabs PrimeAnalysed#1070510Input Validation and Logic2021-01-21–80
Stored XSS in [https://streamlabs.com/dashboard#/*goal] pagesAnalysed#1049012Cross-site Scripting2020-12-26–68
IDOR when creating App on [platform.streamlabs.com/api/v1/store/whitelist] with user_id fieldAnalysed#983070Insecure Direct Object Reference2020-11-26–61
session takeover via open protocol redirection on streamlabs.comAnalysed#1178239Open Redirect2021-09-01$20050
CSRF in changing users donation_settings [https://streamlabs.com/api/v6/viewer-portal/viewer-settings/donation_settings]Analysed#1049360Cross-Site Request Forgery2020-12-26–49
SSRF allows reading AWS EC2 metadata using "readapi" variable in Streamlabs CloudbotAnalysed#1108418Server-Side Request Forgery2021-02-24$20041
Privilege Escalation Leads to Control The Owner Access Token Which leads to control the stream [streamlabs.com]Analysed#1174527Access Control2021-04-27–38
Host Header injection in oslo.io (using X-Forwarded-For header) leading to email spoofingAnalysed#1072277Input Validation and Logic2021-01-07–37
Sensitive information disclosure to shared access user via streamlabs platform apiAnalysed#1072893Information Disclosure2021-01-20$20036

Subdomains7,102

Subdomains of Logitech
NameScopeFirst seen
taskforceelite.challonge.comNot in the scope2026-11-14
tastythurs.challonge.comNot in the scope2026-11-14
tastytues.challonge.comNot in the scope2026-11-14
taverninthesky.challonge.comNot in the scope2026-11-14
tavernofheroeshots.challonge.comNot in the scope2026-11-14
tbh4.challonge.comNot in the scope2026-11-14
tbh5.challonge.comNot in the scope2026-11-14
tbh555.challonge.comNot in the scope2026-11-14
tboi.challonge.comNot in the scope2026-11-14
tbr3.challonge.comNot in the scope2026-11-14
tbsc.challonge.comNot in the scope2026-11-14
tbyragnarok2018.challonge.comNot in the scope2026-11-14
tcbc.challonge.comNot in the scope2026-11-14
tcegcon2015.challonge.comNot in the scope2026-11-14
tcgcollectibles.challonge.comNot in the scope2026-11-14
tcnesports.challonge.comNot in the scope2026-11-14
tcnjmelee.challonge.comNot in the scope2026-11-14
tcnow.challonge.comNot in the scope2026-11-14
tcpm.challonge.comNot in the scope2026-11-14
tct.challonge.comNot in the scope2026-11-14
tcw.challonge.comNot in the scope2026-11-14
tcwq.challonge.comNot in the scope2026-11-14
tdmpickup.challonge.comNot in the scope2026-11-14
tdtour.challonge.comNot in the scope2026-11-14
te6ecioga.challonge.comNot in the scope2026-11-14
teabaggaz.challonge.comNot in the scope2026-11-14
team-deca.challonge.comNot in the scope2026-11-14
team-melee.challonge.comNot in the scope2026-11-14
team-nachteule.challonge.comNot in the scope2026-11-14
team_frontera.challonge.comNot in the scope2026-11-14
teamabstrakt.challonge.comNot in the scope2026-11-14
teamag.challonge.comNot in the scope2026-11-14
teamairsc2.challonge.comNot in the scope2026-11-14
teamcrystal.challonge.comNot in the scope2026-11-14
teamdao.challonge.comNot in the scope2026-11-14
teamdashsp.challonge.comNot in the scope2026-11-14
teamdraco.challonge.comNot in the scope2026-11-14
teamflamewave.challonge.comNot in the scope2026-11-14
teamfreedom.challonge.comNot in the scope2026-11-14
teamhakai.challonge.comNot in the scope2026-11-14
teamhazmat.challonge.comNot in the scope2026-11-14
teamheir.challonge.comNot in the scope2026-11-14
teamjapanese.challonge.comNot in the scope2026-11-14
teamjuggernauts.challonge.comNot in the scope2026-11-14
teamkillingspree.challonge.comNot in the scope2026-11-14
teamniuehq.challonge.comNot in the scope2026-11-14
teamoptimal.challonge.comNot in the scope2026-11-14
teamoso.challonge.comNot in the scope2026-11-14
teampeak.challonge.comNot in the scope2026-11-14
teamperfectstalker.challonge.comNot in the scope2026-11-14
teampienyc.challonge.comNot in the scope2026-11-14
teamrazerusa.challonge.comNot in the scope2026-11-14
teamregengg.challonge.comNot in the scope2026-11-14
teamrespawn.challonge.comNot in the scope2026-11-14
teamsc.challonge.comNot in the scope2026-11-14
teamsdb.challonge.comNot in the scope2026-11-14
teamserious.challonge.comNot in the scope2026-11-14
teamskynite.challonge.comNot in the scope2026-11-14
teamtechzone.challonge.comNot in the scope2026-11-14
teamtyler.challonge.comNot in the scope2026-11-14
teamunibaseball.challonge.comNot in the scope2026-11-14
teamunibasketball.challonge.comNot in the scope2026-11-14
teamunicycling.challonge.comNot in the scope2026-11-14
teamuniswim.challonge.comNot in the scope2026-11-14
teamunitennis.challonge.comNot in the scope2026-11-14
teamunivolleyball.challonge.comNot in the scope2026-11-14
teamvs.challonge.comNot in the scope2026-11-14
teamwars.challonge.comNot in the scope2026-11-14
teamwpfights.challonge.comNot in the scope2026-11-14
teb.challonge.comNot in the scope2026-11-14
tech.challonge.comNot in the scope2026-11-14
tech-lan.challonge.comNot in the scope2026-11-14
tech2.challonge.comNot in the scope2026-11-14
technical.challonge.comNot in the scope2026-11-14
tedgehen-tournament.challonge.comNot in the scope2026-11-14
teeworldstournaments.challonge.comNot in the scope2026-11-14
tegdezmu.challonge.comNot in the scope2026-11-14
tekkenedmonton.challonge.comNot in the scope2026-11-14
tekkenmadrid.challonge.comNot in the scope2026-11-14
tekkenpropl.challonge.comNot in the scope2026-11-14
tekkenxt.challonge.comNot in the scope2026-11-14
templesports.challonge.comNot in the scope2026-11-14
templetournaments.challonge.comNot in the scope2026-11-14
templeufgc.challonge.comNot in the scope2026-11-14
temporaryplan.challonge.comNot in the scope2026-11-14
tenacity.challonge.comNot in the scope2026-11-14
tenicfinalr.challonge.comNot in the scope2026-11-14
tenisiqq.challonge.comNot in the scope2026-11-14
tennisaliens.challonge.comNot in the scope2026-11-14
tennisballers123.challonge.comNot in the scope2026-11-14
teocal.challonge.comNot in the scope2026-11-14
teorogl.challonge.comNot in the scope2026-11-14
terceraligaonlinemexico.challonge.comNot in the scope2026-11-14
terranpl.challonge.comNot in the scope2026-11-14
terrashockgg.challonge.comNot in the scope2026-11-14
terrastone.challonge.comNot in the scope2026-11-14
test.challonge.comtestNot in the scope2026-11-14
test-alliance.challonge.comtestNot in the scope2026-11-14
test1563899561.challonge.comtestNot in the scope2026-11-14
test1pqqp.challonge.comtestNot in the scope2026-11-14

1,405 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.