Skip to content

Bug bounty program

Platform
HackerOne
Bounties
Pays
Assets in scope
86
Disclosed reports
15
Subdomains
7,102
Vendor on CyberSIXT
Logitech (26 CVEs, 0 exploited)

Most upvoted reports15

All reports
Most upvoted reports of Logitech
ReportWeaknessDisclosedBountyVotes
One Click Account takeover using Ouath CSRF bypass by adding Null byte %00 in state parameter on www.streamlabs.comAnalysed#1046630Cross-Site Request Forgery2021-01-06–99
Manipulating response leads to free access to Streamlabs PrimeAnalysed#1070510Input Validation and Logic2021-01-21–80
Stored XSS in [https://streamlabs.com/dashboard#/*goal] pagesAnalysed#1049012Cross-site Scripting2020-12-26–68
IDOR when creating App on [platform.streamlabs.com/api/v1/store/whitelist] with user_id fieldAnalysed#983070Insecure Direct Object Reference2020-11-26–61
session takeover via open protocol redirection on streamlabs.comAnalysed#1178239Open Redirect2021-09-01$20050
CSRF in changing users donation_settings [https://streamlabs.com/api/v6/viewer-portal/viewer-settings/donation_settings]Analysed#1049360Cross-Site Request Forgery2020-12-26–49
SSRF allows reading AWS EC2 metadata using "readapi" variable in Streamlabs CloudbotAnalysed#1108418Server-Side Request Forgery2021-02-24$20041
Privilege Escalation Leads to Control The Owner Access Token Which leads to control the stream [streamlabs.com]Analysed#1174527Access Control2021-04-27–38
Host Header injection in oslo.io (using X-Forwarded-For header) leading to email spoofingAnalysed#1072277Input Validation and Logic2021-01-07–37
Sensitive information disclosure to shared access user via streamlabs platform apiAnalysed#1072893Information Disclosure2021-01-20$20036

Subdomains7,102

Subdomains of Logitech
NameScopeFirst seen
warehousethrowdown.challonge.comNot in the scope2026-11-14
warframepvp.challonge.comNot in the scope2026-11-14
warlockminitours.challonge.comNot in the scope2026-11-14
warnightarea-games.challonge.comNot in the scope2026-11-14
warofwordsbattleground.challonge.comNot in the scope2026-11-14
warpzone.challonge.comNot in the scope2026-11-14
warroad.challonge.comNot in the scope2026-11-14
wars.challonge.comNot in the scope2026-11-14
warstomp.challonge.comNot in the scope2026-11-14
wartornopen.challonge.comNot in the scope2026-11-14
warzonemc.challonge.comNot in the scope2026-11-14
wasdgaming.challonge.comNot in the scope2026-11-14
waswanipigaming.challonge.comNot in the scope2026-11-14
watchcolonyseason02episode13onlinetv.challonge.comNot in the scope2026-11-14
watchpointoce.challonge.comNot in the scope2026-11-14
wattcastle.challonge.comNot in the scope2026-11-14
wattislife.challonge.comNot in the scope2026-11-14
wayofredemption.challonge.comNot in the scope2026-11-14
wbouk.challonge.comNot in the scope2026-11-14
wbtourney.challonge.comNot in the scope2026-11-14
wc2kk.challonge.comNot in the scope2026-11-14
wccvgc.challonge.comNot in the scope2026-11-14
wcg.challonge.comNot in the scope2026-11-14
wcgperu.challonge.comNot in the scope2026-11-14
wcs2014-aclpro.challonge.comNot in the scope2026-11-14
wcs2014_aclpro.challonge.comNot in the scope2026-11-14
wctourneys.challonge.comNot in the scope2026-11-14
wdaspain.challonge.comNot in the scope2026-11-14
wearecool.challonge.comNot in the scope2026-11-14
web.challonge.comNot in the scope2026-11-14
webdiplomacy.challonge.comNot in the scope2026-11-14
wednesdaynightthrowdown.challonge.comNot in the scope2026-11-14
weeaboos.challonge.comNot in the scope2026-11-14
weeb-clan.challonge.comNot in the scope2026-11-14
weekly.challonge.comNot in the scope2026-11-14
weeklyab.challonge.comNot in the scope2026-11-14
weeklyfightnight.challonge.comNot in the scope2026-11-14
weeklylevelup.challonge.comNot in the scope2026-11-14
wefferinowarriors.challonge.comNot in the scope2026-11-14
wega.challonge.comNot in the scope2026-11-14
weggas.challonge.comNot in the scope2026-11-14
wekklybrawl.challonge.comNot in the scope2026-11-14
well.challonge.comNot in the scope2026-11-14
wellingtonesports.challonge.comNot in the scope2026-11-14
wellingtonfgc.challonge.comNot in the scope2026-11-14
wellplayedinc.challonge.comNot in the scope2026-11-14
wellysmash.challonge.comNot in the scope2026-11-14
welovemelee.challonge.comNot in the scope2026-11-14
weplayesports.challonge.comNot in the scope2026-11-14
weplaystudios.challonge.comNot in the scope2026-11-14
wesagg.challonge.comNot in the scope2026-11-14
west-coast-group.challonge.comNot in the scope2026-11-14
westcoastwarzone.challonge.comNot in the scope2026-11-14
westeros.challonge.comNot in the scope2026-11-14
westhoustonsmash.challonge.comNot in the scope2026-11-14
westlan.challonge.comNot in the scope2026-11-14
westmorelandsmashcommunity.challonge.comNot in the scope2026-11-14
westopencup.challonge.comNot in the scope2026-11-14
wetfloorwednesdays.challonge.comNot in the scope2026-11-14
wethinkcode-coders-cup.challonge.comNot in the scope2026-11-14
wework.challonge.comNot in the scope2026-11-14
wfngfstun.challonge.comNot in the scope2026-11-14
wggcod.challonge.comNot in the scope2026-11-14
wggfifa.challonge.comNot in the scope2026-11-14
wgt2016.challonge.comNot in the scope2026-11-14
wgtamigos.challonge.comNot in the scope2026-11-14
wgtpinhuntersgolfclub.challonge.comNot in the scope2026-11-14
wgw.challonge.comNot in the scope2026-11-14
whenanarchyrules.challonge.comNot in the scope2026-11-14
whitbread.challonge.comNot in the scope2026-11-14
whiterose.challonge.comNot in the scope2026-11-14
whiteskybelgiumteam.challonge.comNot in the scope2026-11-14
whitewatersmash.challonge.comNot in the scope2026-11-14
whosonlocation.challonge.comNot in the scope2026-11-14
wichitasmash.challonge.comNot in the scope2026-11-14
wifgc.challonge.comNot in the scope2026-11-14
wiifitstudio.challonge.comNot in the scope2026-11-14
wikiwars.challonge.comNot in the scope2026-11-14
wildcard.challonge.comNot in the scope2026-11-14
wiltonopen.challonge.comNot in the scope2026-11-14
windbox.challonge.comNot in the scope2026-11-14
windjammersbattleroyale.challonge.comNot in the scope2026-11-14
windjammersfr.challonge.comNot in the scope2026-11-14
windsoramiibobattles.challonge.comNot in the scope2026-11-14
winston.challonge.comNot in the scope2026-11-14
wintergardengaming.challonge.comNot in the scope2026-11-14
winterolympicss.challonge.comNot in the scope2026-11-14
winterseason.challonge.comNot in the scope2026-11-14
wintersmash2012.challonge.comNot in the scope2026-11-14
wintersmash2013.challonge.comNot in the scope2026-11-14
wirwar.challonge.comNot in the scope2026-11-14
wisewizardgames.challonge.comNot in the scope2026-11-14
wizardworld.challonge.comNot in the scope2026-11-14
wloh-cupen.challonge.comNot in the scope2026-11-14
wlpc.challonge.comNot in the scope2026-11-14
wmsmash.challonge.comNot in the scope2026-11-14
wnesmash.challonge.comNot in the scope2026-11-14
wodotatours.challonge.comNot in the scope2026-11-14
wolfproducciones.challonge.comNot in the scope2026-11-14
wollongongfgc.challonge.comNot in the scope2026-11-14

1,405 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.