Skip to content

Bug bounty program

Platform
HackerOne
Bounties
Pays
Assets in scope
86
Disclosed reports
15
Subdomains
7,102
Vendor on CyberSIXT
Logitech (26 CVEs, 0 exploited)

Most upvoted reports15

All reports
Most upvoted reports of Logitech
ReportWeaknessDisclosedBountyVotes
One Click Account takeover using Ouath CSRF bypass by adding Null byte %00 in state parameter on www.streamlabs.comAnalysed#1046630Cross-Site Request Forgery2021-01-06–99
Manipulating response leads to free access to Streamlabs PrimeAnalysed#1070510Input Validation and Logic2021-01-21–80
Stored XSS in [https://streamlabs.com/dashboard#/*goal] pagesAnalysed#1049012Cross-site Scripting2020-12-26–68
IDOR when creating App on [platform.streamlabs.com/api/v1/store/whitelist] with user_id fieldAnalysed#983070Insecure Direct Object Reference2020-11-26–61
session takeover via open protocol redirection on streamlabs.comAnalysed#1178239Open Redirect2021-09-01$20050
CSRF in changing users donation_settings [https://streamlabs.com/api/v6/viewer-portal/viewer-settings/donation_settings]Analysed#1049360Cross-Site Request Forgery2020-12-26–49
SSRF allows reading AWS EC2 metadata using "readapi" variable in Streamlabs CloudbotAnalysed#1108418Server-Side Request Forgery2021-02-24$20041
Privilege Escalation Leads to Control The Owner Access Token Which leads to control the stream [streamlabs.com]Analysed#1174527Access Control2021-04-27–38
Host Header injection in oslo.io (using X-Forwarded-For header) leading to email spoofingAnalysed#1072277Input Validation and Logic2021-01-07–37
Sensitive information disclosure to shared access user via streamlabs platform apiAnalysed#1072893Information Disclosure2021-01-20$20036

Subdomains7,102

Subdomains of Logitech
NameScopeFirst seen
thisisgeek.challonge.comNot in the scope2026-11-14
thl.challonge.comNot in the scope2026-11-14
thm.challonge.comNot in the scope2026-11-14
thms.challonge.comNot in the scope2026-11-14
thorhj.challonge.comNot in the scope2026-11-14
thps.challonge.comNot in the scope2026-11-14
thunderedge.challonge.comNot in the scope2026-11-14
thursday-night-throwdown.challonge.comNot in the scope2026-11-14
thursdaynightthrowdown.challonge.comNot in the scope2026-11-14
tibhg2017.challonge.comNot in the scope2026-11-14
ticeg.challonge.comNot in the scope2026-11-14
ticktocktues.challonge.comNot in the scope2026-11-14
tide-pool-tourneys.challonge.comNot in the scope2026-11-14
tides.challonge.comNot in the scope2026-11-14
tiermonster.challonge.comNot in the scope2026-11-14
tieu.challonge.comNot in the scope2026-11-14
tigergammon.challonge.comNot in the scope2026-11-14
tikonov.challonge.comNot in the scope2026-11-14
timcon.challonge.comNot in the scope2026-11-14
tipsmash.challonge.comNot in the scope2026-11-14
titadota2.challonge.comNot in the scope2026-11-14
titangaming.challonge.comNot in the scope2026-11-14
titansvsdolphinslive.challonge.comNot in the scope2026-11-14
titlefight.challonge.comNot in the scope2026-11-14
titletownsmash.challonge.comNot in the scope2026-11-14
titwoodltc.challonge.comNot in the scope2026-11-14
tkjoliet.challonge.comNot in the scope2026-11-14
tkls.challonge.comNot in the scope2026-11-14
tko.challonge.comNot in the scope2026-11-14
tlan5.challonge.comNot in the scope2026-11-14
tlan6.challonge.comNot in the scope2026-11-14
tlk.challonge.comNot in the scope2026-11-14
tloc.challonge.comNot in the scope2026-11-14
tloc1k.challonge.comNot in the scope2026-11-14
tloz.challonge.comNot in the scope2026-11-14
tlp-opencup.challonge.comNot in the scope2026-11-14
tlp-world.challonge.comNot in the scope2026-11-14
tlplc-presents.challonge.comNot in the scope2026-11-14
tmcesports.challonge.comNot in the scope2026-11-14
tmhs.challonge.comNot in the scope2026-11-14
tmicc2016.challonge.comNot in the scope2026-11-14
tml2016.challonge.comNot in the scope2026-11-14
tmnt.challonge.comNot in the scope2026-11-14
tmss.challonge.comNot in the scope2026-11-14
tnapf.challonge.comNot in the scope2026-11-14
tneda.challonge.comNot in the scope2026-11-14
tngaming.challonge.comNot in the scope2026-11-14
tnl.challonge.comNot in the scope2026-11-14
tnsm.challonge.comNot in the scope2026-11-14
tntfgc.challonge.comNot in the scope2026-11-14
tntrevival.challonge.comNot in the scope2026-11-14
to-esports.challonge.comNot in the scope2026-11-14
toa.challonge.comNot in the scope2026-11-14
tobbeochgurralol.challonge.comNot in the scope2026-11-14
tod2014.challonge.comNot in the scope2026-11-14
todfgc.challonge.comNot in the scope2026-11-14
toniemy.challonge.comNot in the scope2026-11-14
top50.challonge.comNot in the scope2026-11-14
top8final.challonge.comNot in the scope2026-11-14
topanga.challonge.comNot in the scope2026-11-14
topangachallengecup.challonge.comNot in the scope2026-11-14
topangacharitycup6.challonge.comNot in the scope2026-11-14
topangajpn.challonge.comNot in the scope2026-11-14
topcitysmash.challonge.comNot in the scope2026-11-14
topdeck.challonge.comNot in the scope2026-11-14
topfifalatam.challonge.comNot in the scope2026-11-14
topfifamx.challonge.comNot in the scope2026-11-14
topmid.challonge.comNot in the scope2026-11-14
topreversi.challonge.comNot in the scope2026-11-14
tops.challonge.comNot in the scope2026-11-14
toptiervalley.challonge.comNot in the scope2026-11-14
toquillnaments.challonge.comNot in the scope2026-11-14
toratoratora.challonge.comNot in the scope2026-11-14
torel.challonge.comNot in the scope2026-11-14
tornado.challonge.comNot in the scope2026-11-14
torneioshadow2.challonge.comNot in the scope2026-11-14
torneobc.challonge.comNot in the scope2026-11-14
torneocounterstrike.challonge.comNot in the scope2026-11-14
torneoluckia.challonge.comNot in the scope2026-11-14
torneomega.challonge.comNot in the scope2026-11-14
torneonemsi.challonge.comNot in the scope2026-11-14
torneonyduscw.challonge.comNot in the scope2026-11-14
torneosboliviatours.challonge.comNot in the scope2026-11-14
torneosnydus.challonge.comNot in the scope2026-11-14
torneosrabo.challonge.comNot in the scope2026-11-14
torneossaltychile.challonge.comNot in the scope2026-11-14
torontost.challonge.comNot in the scope2026-11-14
torontotoptiers.challonge.comNot in the scope2026-11-14
toroscup.challonge.comNot in the scope2026-11-14
toryuken.challonge.comNot in the scope2026-11-14
toss.challonge.comNot in the scope2026-11-14
tossanga.challonge.comNot in the scope2026-11-14
totalbeatdown.challonge.comNot in the scope2026-11-14
totalwaritalia.challonge.comNot in the scope2026-11-14
totalwartournaments.challonge.comNot in the scope2026-11-14
tou.challonge.comNot in the scope2026-11-14
touchocho.challonge.comNot in the scope2026-11-14
toughcookietv.challonge.comNot in the scope2026-11-14
touhouplus.challonge.comNot in the scope2026-11-14
tournamentofchampions.challonge.comNot in the scope2026-11-14

1,405 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.