Skip to content

Bug bounty program

Platform
HackerOne
Bounties
Pays
Assets in scope
86
Disclosed reports
15
Subdomains
7,102
Vendor on CyberSIXT
Logitech (26 CVEs, 0 exploited)

Most upvoted reports15

All reports
Most upvoted reports of Logitech
ReportWeaknessDisclosedBountyVotes
One Click Account takeover using Ouath CSRF bypass by adding Null byte %00 in state parameter on www.streamlabs.comAnalysed#1046630Cross-Site Request Forgery2021-01-06–99
Manipulating response leads to free access to Streamlabs PrimeAnalysed#1070510Input Validation and Logic2021-01-21–80
Stored XSS in [https://streamlabs.com/dashboard#/*goal] pagesAnalysed#1049012Cross-site Scripting2020-12-26–68
IDOR when creating App on [platform.streamlabs.com/api/v1/store/whitelist] with user_id fieldAnalysed#983070Insecure Direct Object Reference2020-11-26–61
session takeover via open protocol redirection on streamlabs.comAnalysed#1178239Open Redirect2021-09-01$20050
CSRF in changing users donation_settings [https://streamlabs.com/api/v6/viewer-portal/viewer-settings/donation_settings]Analysed#1049360Cross-Site Request Forgery2020-12-26–49
SSRF allows reading AWS EC2 metadata using "readapi" variable in Streamlabs CloudbotAnalysed#1108418Server-Side Request Forgery2021-02-24$20041
Privilege Escalation Leads to Control The Owner Access Token Which leads to control the stream [streamlabs.com]Analysed#1174527Access Control2021-04-27–38
Host Header injection in oslo.io (using X-Forwarded-For header) leading to email spoofingAnalysed#1072277Input Validation and Logic2021-01-07–37
Sensitive information disclosure to shared access user via streamlabs platform apiAnalysed#1072893Information Disclosure2021-01-20$20036

Subdomains7,102

Subdomains of Logitech
NameScopeFirst seen
ugcow.challonge.comNot in the scope2026-11-14
ugcudtf2.challonge.comNot in the scope2026-11-14
ugs.challonge.comNot in the scope2026-11-14
ugsg.challonge.comNot in the scope2026-11-14
uhcsmash.challonge.comNot in the scope2026-11-14
uhd.challonge.comNot in the scope2026-11-14
uhml.challonge.comNot in the scope2026-11-14
uhsmash.challonge.comNot in the scope2026-11-14
uidahosmashbros.challonge.comNot in the scope2026-11-14
uiucsocialgamingclub.challonge.comNot in the scope2026-11-14
ukmasters.challonge.comNot in the scope2026-11-14
ukrainevspolandenvivo.challonge.comNot in the scope2026-11-14
ulsmash.challonge.comNot in the scope2026-11-14
ultimatefighters.challonge.comNot in the scope2026-11-14
ultimategt.challonge.comNot in the scope2026-11-14
ultimatepurecustomgame.challonge.comNot in the scope2026-11-14
ultimatesalfighterz180.challonge.comNot in the scope2026-11-14
ultimateunleashed.challonge.comNot in the scope2026-11-14
ultrachen.challonge.comNot in the scope2026-11-14
ultraliskstarleague.challonge.comNot in the scope2026-11-14
ultrarage.challonge.comNot in the scope2026-11-14
ultratitle.challonge.comNot in the scope2026-11-14
umainemelee.challonge.comNot in the scope2026-11-14
umassdsmash.challonge.comNot in the scope2026-11-14
umbcsmash.challonge.comNot in the scope2026-11-14
umdsmash.challonge.comNot in the scope2026-11-14
umfl.challonge.comNot in the scope2026-11-14
umg.challonge.comNot in the scope2026-11-14
umgevents.challonge.comNot in the scope2026-11-14
umk3.challonge.comNot in the scope2026-11-14
uml.challonge.comNot in the scope2026-11-14
umlmelee.challonge.comNot in the scope2026-11-14
umlsmash4.challonge.comNot in the scope2026-11-14
umnsmash.challonge.comNot in the scope2026-11-14
umsk.challonge.comNot in the scope2026-11-14
umsk2.challonge.comNot in the scope2026-11-14
umskportal.challonge.comNot in the scope2026-11-14
umw.challonge.comNot in the scope2026-11-14
unbirthday.challonge.comNot in the scope2026-11-14
undefeatedaz.challonge.comNot in the scope2026-11-14
undercardstournaments.challonge.comNot in the scope2026-11-14
underground-gaming.challonge.comNot in the scope2026-11-14
undergroundtourney.challonge.comNot in the scope2026-11-14
undz.challonge.comNot in the scope2026-11-14
unequalledmedia.challonge.comNot in the scope2026-11-14
unhsmash.challonge.comNot in the scope2026-11-14
uniel.challonge.comNot in the scope2026-11-14
unileaguefifa.challonge.comNot in the scope2026-11-14
union525.challonge.comNot in the scope2026-11-14
unityssbm.challonge.comNot in the scope2026-11-14
unknownsc.challonge.comNot in the scope2026-11-14
unlppes2.challonge.comNot in the scope2026-11-14
unluck.challonge.comNot in the scope2026-11-14
unrealpugs.challonge.comNot in the scope2026-11-14
unsungheroes.challonge.comNot in the scope2026-11-14
unsure.challonge.comNot in the scope2026-11-14
unswsmash.challonge.comNot in the scope2026-11-14
uofmduluth.challonge.comNot in the scope2026-11-14
uofsc.challonge.comNot in the scope2026-11-14
uomesports.challonge.comNot in the scope2026-11-14
uopacific.challonge.comNot in the scope2026-11-14
uos.challonge.comNot in the scope2026-11-14
uosmash.challonge.comNot in the scope2026-11-14
uppertalememe.challonge.comNot in the scope2026-11-14
uppsalasmash.challonge.comNot in the scope2026-11-14
uprise.challonge.comNot in the scope2026-11-14
uproar.challonge.comNot in the scope2026-11-14
uptownranking.challonge.comNot in the scope2026-11-14
uqlol.challonge.comNot in the scope2026-11-14
uqsmash.challonge.comNot in the scope2026-11-14
uroboros.challonge.comNot in the scope2026-11-14
ursatv.challonge.comNot in the scope2026-11-14
urt.challonge.comNot in the scope2026-11-14
usarugby.challonge.comNot in the scope2026-11-14
uscasl.challonge.comNot in the scope2026-11-14
user-assets.challonge.comNot in the scope2026-11-14
usf4cpu.challonge.comNot in the scope2026-11-14
usfc.challonge.comNot in the scope2026-11-14
usfspvgc.challonge.comNot in the scope2026-11-14
usmash.challonge.comNot in the scope2026-11-14
usmto.challonge.comNot in the scope2026-11-14
usuesports.challonge.comNot in the scope2026-11-14
ut2004quickcups.challonge.comNot in the scope2026-11-14
utahpm.challonge.comNot in the scope2026-11-14
utahsmash.challonge.comNot in the scope2026-11-14
utasmash.challonge.comNot in the scope2026-11-14
utsmash.challonge.comNot in the scope2026-11-14
utstatelittleleague.challonge.comNot in the scope2026-11-14
uwc.challonge.comNot in the scope2026-11-14
uwcs.challonge.comNot in the scope2026-11-14
uwmsmash.challonge.comNot in the scope2026-11-14
uwsmashclub.challonge.comNot in the scope2026-11-14
uyu.challonge.comNot in the scope2026-11-14
v1.challonge.comNot in the scope2026-11-14
vagbears.challonge.comNot in the scope2026-11-14
vahoopleague.challonge.comNot in the scope2026-11-14
vaimogbg.challonge.comNot in the scope2026-11-14
valdostall8-10yo.challonge.comNot in the scope2026-11-14
vampir3.challonge.comNot in the scope2026-11-14
vanguardseries.challonge.comNot in the scope2026-11-14

1,405 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.