Skip to content

Bug bounty program

Platform
HackerOne
Bounties
Pays
Assets in scope
86
Disclosed reports
15
Subdomains
7,102
Vendor on CyberSIXT
Logitech (26 CVEs, 0 exploited)

Most upvoted reports15

All reports
Most upvoted reports of Logitech
ReportWeaknessDisclosedBountyVotes
One Click Account takeover using Ouath CSRF bypass by adding Null byte %00 in state parameter on www.streamlabs.comAnalysed#1046630Cross-Site Request Forgery2021-01-06–99
Manipulating response leads to free access to Streamlabs PrimeAnalysed#1070510Input Validation and Logic2021-01-21–80
Stored XSS in [https://streamlabs.com/dashboard#/*goal] pagesAnalysed#1049012Cross-site Scripting2020-12-26–68
IDOR when creating App on [platform.streamlabs.com/api/v1/store/whitelist] with user_id fieldAnalysed#983070Insecure Direct Object Reference2020-11-26–61
session takeover via open protocol redirection on streamlabs.comAnalysed#1178239Open Redirect2021-09-01$20050
CSRF in changing users donation_settings [https://streamlabs.com/api/v6/viewer-portal/viewer-settings/donation_settings]Analysed#1049360Cross-Site Request Forgery2020-12-26–49
SSRF allows reading AWS EC2 metadata using "readapi" variable in Streamlabs CloudbotAnalysed#1108418Server-Side Request Forgery2021-02-24$20041
Privilege Escalation Leads to Control The Owner Access Token Which leads to control the stream [streamlabs.com]Analysed#1174527Access Control2021-04-27–38
Host Header injection in oslo.io (using X-Forwarded-For header) leading to email spoofingAnalysed#1072277Input Validation and Logic2021-01-07–37
Sensitive information disclosure to shared access user via streamlabs platform apiAnalysed#1072893Information Disclosure2021-01-20$20036

Subdomains7,102

Subdomains of Logitech
NameScopeFirst seen
testa123.challonge.comNot in the scope2026-11-14
testebo.challonge.comNot in the scope2026-11-14
testmezoo.challonge.comNot in the scope2026-11-14
testwarnightwarday.challonge.comNot in the scope2026-11-14
tetrisattackonline.challonge.comNot in the scope2026-11-14
teuphoria.challonge.comNot in the scope2026-11-14
texasgamerslounge.challonge.comNot in the scope2026-11-14
tf.challonge.comNot in the scope2026-11-14
tf15.challonge.comNot in the scope2026-11-14
tf2osl.challonge.comNot in the scope2026-11-14
tfc.challonge.comNot in the scope2026-11-14
tfctournament.challonge.comNot in the scope2026-11-14
tfhft.challonge.comNot in the scope2026-11-14
tfnxchampionsleagueseason2.challonge.comNot in the scope2026-11-14
tftvmelee.challonge.comNot in the scope2026-11-14
tg15.challonge.comNot in the scope2026-11-14
tgi.challonge.comNot in the scope2026-11-14
tgp.challonge.comNot in the scope2026-11-14
tgpl.challonge.comNot in the scope2026-11-14
tgrunnersbr.challonge.comNot in the scope2026-11-14
tgski.challonge.comNot in the scope2026-11-14
tgsmelee.challonge.comNot in the scope2026-11-14
tgstournaments.challonge.comNot in the scope2026-11-14
tgt.challonge.comNot in the scope2026-11-14
tgtourneys.challonge.comNot in the scope2026-11-14
thallium.challonge.comNot in the scope2026-11-14
thatdamnlan.challonge.comNot in the scope2026-11-14
the-banished.challonge.comNot in the scope2026-11-14
the-fightclub.challonge.comNot in the scope2026-11-14
the-ggc.challonge.comNot in the scope2026-11-14
the-jobbers.challonge.comNot in the scope2026-11-14
the-lab.challonge.comNot in the scope2026-11-14
the101.challonge.comNot in the scope2026-11-14
the33tournaments.challonge.comNot in the scope2026-11-14
thebackyard.challonge.comNot in the scope2026-11-14
thebadgercraftgames.challonge.comNot in the scope2026-11-14
thebasement.challonge.comNot in the scope2026-11-14
thebatman.challonge.comNot in the scope2026-11-14
thebirdhouse.challonge.comNot in the scope2026-11-14
thecavefairfax.challonge.comNot in the scope2026-11-14
thecavesmash.challonge.comNot in the scope2026-11-14
thecavessb.challonge.comNot in the scope2026-11-14
thechamberco.challonge.comNot in the scope2026-11-14
thecomfortzone.challonge.comNot in the scope2026-11-14
thecrew.challonge.comNot in the scope2026-11-14
thedigitaldojo.challonge.comNot in the scope2026-11-14
thedistancegaming.challonge.comNot in the scope2026-11-14
thefallclassic.challonge.comNot in the scope2026-11-14
thefight2016.challonge.comNot in the scope2026-11-14
theflexzone.challonge.comNot in the scope2026-11-14
thegameassemblymalmo.challonge.comNot in the scope2026-11-14
thegamerchronicles.challonge.comNot in the scope2026-11-14
thegreenbaygolfacc.challonge.comNot in the scope2026-11-14
theguilddxb.challonge.comNot in the scope2026-11-14
thegwentlemensopen.challonge.comNot in the scope2026-11-14
thegxl.challonge.comNot in the scope2026-11-14
thehumidcup.challonge.comNot in the scope2026-11-14
thejedi.challonge.comNot in the scope2026-11-14
thejedicouncil.challonge.comNot in the scope2026-11-14
thekillacup.challonge.comNot in the scope2026-11-14
thekillahclowns.challonge.comNot in the scope2026-11-14
thekingdom.challonge.comNot in the scope2026-11-14
thelantastic.challonge.comNot in the scope2026-11-14
thelidpoppers.challonge.comNot in the scope2026-11-14
themechanicsgrandtour.challonge.comNot in the scope2026-11-14
themeleegames.challonge.comNot in the scope2026-11-14
themilkbar.challonge.comNot in the scope2026-11-14
themixup.challonge.comNot in the scope2026-11-14
thenerdclub.challonge.comNot in the scope2026-11-14
thenerdlv.challonge.comNot in the scope2026-11-14
thenewbeginning-tlou.challonge.comNot in the scope2026-11-14
theninjalegion.challonge.comNot in the scope2026-11-14
thenintendites.challonge.comNot in the scope2026-11-14
thenwl.challonge.comNot in the scope2026-11-14
thenydus.challonge.comNot in the scope2026-11-14
theorycraft.challonge.comNot in the scope2026-11-14
thepandorahouse.challonge.comNot in the scope2026-11-14
thephoenixdynasty.challonge.comNot in the scope2026-11-14
theplays.challonge.comNot in the scope2026-11-14
thereality.challonge.comNot in the scope2026-11-14
therealitymain.challonge.comNot in the scope2026-11-14
therealityofficial.challonge.comNot in the scope2026-11-14
therjmurray.challonge.comNot in the scope2026-11-14
thesaltfactory.challonge.comNot in the scope2026-11-14
thesavagelands.challonge.comNot in the scope2026-11-14
thesfbn.challonge.comNot in the scope2026-11-14
theshovelleague.challonge.comNot in the scope2026-11-14
thesmashcommunity.challonge.comNot in the scope2026-11-14
thesmashoasis.challonge.comNot in the scope2026-11-14
thesplit.challonge.comNot in the scope2026-11-14
thesstdl.challonge.comNot in the scope2026-11-14
thesummoners.challonge.comNot in the scope2026-11-14
theunclejoeshow.challonge.comNot in the scope2026-11-14
thewargate.challonge.comNot in the scope2026-11-14
theweeklygauntlet.challonge.comNot in the scope2026-11-14
thewiisportsassociation.challonge.comNot in the scope2026-11-14
thezoopgh.challonge.comNot in the scope2026-11-14
thiago.challonge.comNot in the scope2026-11-14
thiodrio.challonge.comNot in the scope2026-11-14
thirdeyeygoparole.challonge.comNot in the scope2026-11-14

1,405 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.