Skip to content

Bug bounty program

Platform
HackerOne
Bounties
Pays
Assets in scope
86
Disclosed reports
15
Subdomains
7,102
Vendor on CyberSIXT
Logitech (26 CVEs, 0 exploited)

Most upvoted reports15

All reports
Most upvoted reports of Logitech
ReportWeaknessDisclosedBountyVotes
One Click Account takeover using Ouath CSRF bypass by adding Null byte %00 in state parameter on www.streamlabs.comAnalysed#1046630Cross-Site Request Forgery2021-01-06–99
Manipulating response leads to free access to Streamlabs PrimeAnalysed#1070510Input Validation and Logic2021-01-21–80
Stored XSS in [https://streamlabs.com/dashboard#/*goal] pagesAnalysed#1049012Cross-site Scripting2020-12-26–68
IDOR when creating App on [platform.streamlabs.com/api/v1/store/whitelist] with user_id fieldAnalysed#983070Insecure Direct Object Reference2020-11-26–61
session takeover via open protocol redirection on streamlabs.comAnalysed#1178239Open Redirect2021-09-01$20050
CSRF in changing users donation_settings [https://streamlabs.com/api/v6/viewer-portal/viewer-settings/donation_settings]Analysed#1049360Cross-Site Request Forgery2020-12-26–49
SSRF allows reading AWS EC2 metadata using "readapi" variable in Streamlabs CloudbotAnalysed#1108418Server-Side Request Forgery2021-02-24$20041
Privilege Escalation Leads to Control The Owner Access Token Which leads to control the stream [streamlabs.com]Analysed#1174527Access Control2021-04-27–38
Host Header injection in oslo.io (using X-Forwarded-For header) leading to email spoofingAnalysed#1072277Input Validation and Logic2021-01-07–37
Sensitive information disclosure to shared access user via streamlabs platform apiAnalysed#1072893Information Disclosure2021-01-20$20036

Subdomains7,102

Subdomains of Logitech
NameScopeFirst seen
vanillarin.challonge.comNot in the scope2026-11-14
vantucky.challonge.comNot in the scope2026-11-14
vasorias.challonge.comNot in the scope2026-11-14
vaultgames.challonge.comNot in the scope2026-11-14
vcom.challonge.comNot in the scope2026-11-14
vegabits.challonge.comNot in the scope2026-11-14
vegasbabybowling.challonge.comNot in the scope2026-11-14
vegasmadden.challonge.comNot in the scope2026-11-14
vegaspantheon.challonge.comNot in the scope2026-11-14
vegasrps.challonge.comNot in the scope2026-11-14
vegassmash.challonge.comNot in the scope2026-11-14
vegassmash4.challonge.comNot in the scope2026-11-14
vegassmash4remakes.challonge.comNot in the scope2026-11-14
veilstone.challonge.comNot in the scope2026-11-14
vendredisrespect.challonge.comNot in the scope2026-11-14
venezuelagaming5.challonge.comNot in the scope2026-11-14
venezuelat.challonge.comNot in the scope2026-11-14
vengeancepro.challonge.comNot in the scope2026-11-14
vennilabaddykulu.challonge.comNot in the scope2026-11-14
venus-aueb.challonge.comNot in the scope2026-11-14
vercellibikepolo.challonge.comNot in the scope2026-11-14
vereinsmeisterschaften-pool.challonge.comNot in the scope2026-11-14
vergots06e07online.challonge.comNot in the scope2026-11-14
vermontmelee.challonge.comNot in the scope2026-11-14
versus.challonge.comNot in the scope2026-11-14
versusasia.challonge.comNot in the scope2026-11-14
versusgameplay.challonge.comNot in the scope2026-11-14
vexos.challonge.comNot in the scope2026-11-14
vexteriam.challonge.comNot in the scope2026-11-14
vfcircuit.challonge.comNot in the scope2026-11-14
vfgc.challonge.comNot in the scope2026-11-14
vfw7403.challonge.comNot in the scope2026-11-14
vgames.challonge.comNot in the scope2026-11-14
vgbcwest.challonge.comNot in the scope2026-11-14
vgbootcamp.challonge.comNot in the scope2026-11-14
vgcomic2015.challonge.comNot in the scope2026-11-14
vgh808.challonge.comNot in the scope2026-11-14
vgkumite.challonge.comNot in the scope2026-11-14
vgp.challonge.comNot in the scope2026-11-14
vgs.challonge.comNot in the scope2026-11-14
vicestrmtourneys.challonge.comNot in the scope2026-11-14
victory.challonge.comNot in the scope2026-11-14
videogains.challonge.comNot in the scope2026-11-14
videogamerescue.challonge.comNot in the scope2026-11-14
videogameworldmelee.challonge.comNot in the scope2026-11-14
vidyard-fifa.challonge.comNot in the scope2026-11-14
vidyashorts.challonge.comNot in the scope2026-11-14
vietnalol.challonge.comNot in the scope2026-11-14
viga.challonge.comNot in the scope2026-11-14
villamercedes.challonge.comNot in the scope2026-11-14
villaretro.challonge.comNot in the scope2026-11-14
vimango.challonge.comNot in the scope2026-11-14
vindication.challonge.comNot in the scope2026-11-14
vipers.challonge.comNot in the scope2026-11-14
virtualdojovienna.challonge.comNot in the scope2026-11-14
virtualnet.challonge.comNot in the scope2026-11-14
vivacityesports.challonge.comNot in the scope2026-11-14
vividgold.challonge.comNot in the scope2026-11-14
vjasmash.challonge.comNot in the scope2026-11-14
vjgamer.challonge.comNot in the scope2026-11-14
vlg.challonge.comNot in the scope2026-11-14
vmbp.challonge.comNot in the scope2026-11-14
vns-clan.challonge.comNot in the scope2026-11-14
voicesofagora.challonge.comNot in the scope2026-11-14
volcanicgaming.challonge.comNot in the scope2026-11-14
volcanicsmash.challonge.comNot in the scope2026-11-14
volcanink.challonge.comNot in the scope2026-11-14
vooblyofficial.challonge.comNot in the scope2026-11-14
voyagers.challonge.comNot in the scope2026-11-14
vs4k.challonge.comNot in the scope2026-11-14
vsb.challonge.comNot in the scope2026-11-14
vsclru.challonge.comNot in the scope2026-11-14
vsfighting.challonge.comNot in the scope2026-11-14
vsfmorocco.challonge.comNot in the scope2026-11-14
vslclashroyale.challonge.comNot in the scope2026-11-14
vsparkzyy.challonge.comNot in the scope2026-11-14
vsynergy.challonge.comNot in the scope2026-11-14
vt.challonge.comNot in the scope2026-11-14
vtglan.challonge.comNot in the scope2026-11-14
vtraining.challonge.comNot in the scope2026-11-14
vtsmash.challonge.comNot in the scope2026-11-14
vu.challonge.comNot in the scope2026-11-14
vueltaciclistaalpaisvasco2017envivogratistv.challonge.comNot in the scope2026-11-14
vuk.challonge.comNot in the scope2026-11-14
vvd.challonge.comNot in the scope2026-11-14
vvv.challonge.comNot in the scope2026-11-14
vx9gamingcommunity.challonge.comNot in the scope2026-11-14
vymtg.challonge.comNot in the scope2026-11-14
w2tj.challonge.comNot in the scope2026-11-14
w2vy.challonge.comNot in the scope2026-11-14
w4d.challonge.comNot in the scope2026-11-14
wacky.challonge.comNot in the scope2026-11-14
wackyweegwednesdays.challonge.comNot in the scope2026-11-14
wahturniej.challonge.comNot in the scope2026-11-14
wakelandll8-10yo.challonge.comNot in the scope2026-11-14
wal-mn.challonge.comNot in the scope2026-11-14
walkers.challonge.comNot in the scope2026-11-14
war2.challonge.comNot in the scope2026-11-14
war2ru.challonge.comNot in the scope2026-11-14
wardy.challonge.comNot in the scope2026-11-14

1,405 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.