Skip to content

Bug bounty program

Platform
HackerOne
Bounties
Pays
Assets in scope
86
Disclosed reports
15
Subdomains
7,102
Vendor on CyberSIXT
Logitech (26 CVEs, 0 exploited)

Most upvoted reports15

All reports
Most upvoted reports of Logitech
ReportWeaknessDisclosedBountyVotes
One Click Account takeover using Ouath CSRF bypass by adding Null byte %00 in state parameter on www.streamlabs.comAnalysed#1046630Cross-Site Request Forgery2021-01-06–99
Manipulating response leads to free access to Streamlabs PrimeAnalysed#1070510Input Validation and Logic2021-01-21–80
Stored XSS in [https://streamlabs.com/dashboard#/*goal] pagesAnalysed#1049012Cross-site Scripting2020-12-26–68
IDOR when creating App on [platform.streamlabs.com/api/v1/store/whitelist] with user_id fieldAnalysed#983070Insecure Direct Object Reference2020-11-26–61
session takeover via open protocol redirection on streamlabs.comAnalysed#1178239Open Redirect2021-09-01$20050
CSRF in changing users donation_settings [https://streamlabs.com/api/v6/viewer-portal/viewer-settings/donation_settings]Analysed#1049360Cross-Site Request Forgery2020-12-26–49
SSRF allows reading AWS EC2 metadata using "readapi" variable in Streamlabs CloudbotAnalysed#1108418Server-Side Request Forgery2021-02-24$20041
Privilege Escalation Leads to Control The Owner Access Token Which leads to control the stream [streamlabs.com]Analysed#1174527Access Control2021-04-27–38
Host Header injection in oslo.io (using X-Forwarded-For header) leading to email spoofingAnalysed#1072277Input Validation and Logic2021-01-07–37
Sensitive information disclosure to shared access user via streamlabs platform apiAnalysed#1072893Information Disclosure2021-01-20$20036

Subdomains7,102

Subdomains of Logitech
NameScopeFirst seen
tournois-lds.challonge.comNot in the scope2026-11-14
tournoisdehoenne20082017.challonge.comNot in the scope2026-11-14
toursbrasil.challonge.comNot in the scope2026-11-14
tourspvp.challonge.comNot in the scope2026-11-14
tourvenezuela.challonge.comNot in the scope2026-11-14
towsonsmash.challonge.comNot in the scope2026-11-14
tpc.challonge.comNot in the scope2026-11-14
tpnll.challonge.comNot in the scope2026-11-14
tpssmash.challonge.comNot in the scope2026-11-14
tpstournaments.challonge.comNot in the scope2026-11-14
tpx.challonge.comNot in the scope2026-11-14
tquah.challonge.comNot in the scope2026-11-14
tracecomplete.challonge.comNot in the scope2026-11-14
tradewindgames.challonge.comNot in the scope2026-11-14
tramplegg.challonge.comNot in the scope2026-11-14
travelhs.challonge.comNot in the scope2026-11-14
travelingcontroller.challonge.comNot in the scope2026-11-14
tremendodude.challonge.comNot in the scope2026-11-14
trennett.challonge.comNot in the scope2026-11-14
trentcande.challonge.comNot in the scope2026-11-14
trewgtthwhgtw.challonge.comNot in the scope2026-11-14
trimbleindia.challonge.comNot in the scope2026-11-14
trinityforce.challonge.comNot in the scope2026-11-14
trinityparkll10-12yo.challonge.comNot in the scope2026-11-14
trinityparkll8-10yo.challonge.comNot in the scope2026-11-14
trinityparkll9-11yo.challonge.comNot in the scope2026-11-14
triplewreck.challonge.comNot in the scope2026-11-14
tristar.challonge.comNot in the scope2026-11-14
trivals.challonge.comNot in the scope2026-11-14
trixclanevent.challonge.comNot in the scope2026-11-14
trixclanevents.challonge.comNot in the scope2026-11-14
trl.challonge.comNot in the scope2026-11-14
truecombo.challonge.comNot in the scope2026-11-14
tryforce.challonge.comNot in the scope2026-11-14
tse.challonge.comNot in the scope2026-11-14
tsftournaments.challonge.comNot in the scope2026-11-14
tsg-to.challonge.comNot in the scope2026-11-14
tslhyd2018.challonge.comNot in the scope2026-11-14
tsmsb.challonge.comNot in the scope2026-11-14
tsn.challonge.comNot in the scope2026-11-14
tsns.challonge.comNot in the scope2026-11-14
tspf.challonge.comNot in the scope2026-11-14
tsuper-2017.challonge.comNot in the scope2026-11-14
ttmd.challonge.comNot in the scope2026-11-14
ttr.challonge.comNot in the scope2026-11-14
ttssports.challonge.comNot in the scope2026-11-14
ttussb.challonge.comNot in the scope2026-11-14
tucson.challonge.comNot in the scope2026-11-14
tugofwar.challonge.comNot in the scope2026-11-14
tulsapm.challonge.comNot in the scope2026-11-14
tulsasmash.challonge.comNot in the scope2026-11-14
tumblrcraft.challonge.comNot in the scope2026-11-14
tunanocrust.challonge.comNot in the scope2026-11-14
turnamintdark.challonge.comNot in the scope2026-11-14
tusmashclub.challonge.comNot in the scope2026-11-14
tvcnetplay.challonge.comNot in the scope2026-11-14
twcc.challonge.comNot in the scope2026-11-14
twcs.challonge.comNot in the scope2026-11-14
twfightermajor2016.challonge.comNot in the scope2026-11-14
twfm.challonge.comNot in the scope2026-11-14
twgb.challonge.comNot in the scope2026-11-14
twincitygamers.challonge.comNot in the scope2026-11-14
twinkcup.challonge.comNot in the scope2026-11-14
twintowns.challonge.comNot in the scope2026-11-14
twitchfgc.challonge.comNot in the scope2026-11-14
twitchrivals.challonge.comNot in the scope2026-11-14
twl.challonge.comNot in the scope2026-11-14
twlms2k.challonge.comNot in the scope2026-11-14
twreplays.challonge.comNot in the scope2026-11-14
twt2018kr.challonge.comNot in the scope2026-11-14
twwr.challonge.comNot in the scope2026-11-14
txshowdown.challonge.comNot in the scope2026-11-14
txt2014.challonge.comNot in the scope2026-11-14
tycobbbaseballinternational.challonge.comNot in the scope2026-11-14
tzn.challonge.comNot in the scope2026-11-14
uafgaming.challonge.comNot in the scope2026-11-14
ubg.challonge.comNot in the scope2026-11-14
ubw.challonge.comNot in the scope2026-11-14
uc-k8s-slave.challonge.comtoolsNot in the scope2026-11-14
ucc.challonge.comNot in the scope2026-11-14
uccsssb.challonge.comNot in the scope2026-11-14
ucfv.challonge.comNot in the scope2026-11-14
ucm.challonge.comNot in the scope2026-11-14
uconnmelee.challonge.comNot in the scope2026-11-14
ucsmashbros.challonge.comNot in the scope2026-11-14
udargdansk.challonge.comNot in the scope2026-11-14
uesl.challonge.comNot in the scope2026-11-14
ufa.challonge.comNot in the scope2026-11-14
ufg.challonge.comNot in the scope2026-11-14
ufgt10.challonge.comNot in the scope2026-11-14
ufolep46.challonge.comNot in the scope2026-11-14
uft-amateur.challonge.comNot in the scope2026-11-14
ugc4v4tf2.challonge.comNot in the scope2026-11-14
ugc6v6season15.challonge.comNot in the scope2026-11-14
ugc6v6season16.challonge.comNot in the scope2026-11-14
ugc6v6tf2.challonge.comNot in the scope2026-11-14
ugcesports.challonge.comNot in the scope2026-11-14
ugchlseason12.challonge.comNot in the scope2026-11-14
ugchlseason13.challonge.comNot in the scope2026-11-14
ugchltf2.challonge.comNot in the scope2026-11-14

1,405 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.