Skip to content

Bug bounty program

Platform
HackerOne
Bounties
Pays
Assets in scope
86
Disclosed reports
15
Subdomains
7,102
Vendor on CyberSIXT
Logitech (26 CVEs, 0 exploited)

Most upvoted reports15

All reports
Most upvoted reports of Logitech
ReportWeaknessDisclosedBountyVotes
One Click Account takeover using Ouath CSRF bypass by adding Null byte %00 in state parameter on www.streamlabs.comAnalysed#1046630Cross-Site Request Forgery2021-01-06–99
Manipulating response leads to free access to Streamlabs PrimeAnalysed#1070510Input Validation and Logic2021-01-21–80
Stored XSS in [https://streamlabs.com/dashboard#/*goal] pagesAnalysed#1049012Cross-site Scripting2020-12-26–68
IDOR when creating App on [platform.streamlabs.com/api/v1/store/whitelist] with user_id fieldAnalysed#983070Insecure Direct Object Reference2020-11-26–61
session takeover via open protocol redirection on streamlabs.comAnalysed#1178239Open Redirect2021-09-01$20050
CSRF in changing users donation_settings [https://streamlabs.com/api/v6/viewer-portal/viewer-settings/donation_settings]Analysed#1049360Cross-Site Request Forgery2020-12-26–49
SSRF allows reading AWS EC2 metadata using "readapi" variable in Streamlabs CloudbotAnalysed#1108418Server-Side Request Forgery2021-02-24$20041
Privilege Escalation Leads to Control The Owner Access Token Which leads to control the stream [streamlabs.com]Analysed#1174527Access Control2021-04-27–38
Host Header injection in oslo.io (using X-Forwarded-For header) leading to email spoofingAnalysed#1072277Input Validation and Logic2021-01-07–37
Sensitive information disclosure to shared access user via streamlabs platform apiAnalysed#1072893Information Disclosure2021-01-20$20036

Subdomains7,102

Subdomains of Logitech
NameScopeFirst seen
word.apps.logitech.comIn scope2026-11-14
workday.apps.logitech.comIn scope2026-11-14
youtube.apps.logitech.comIn scope2026-11-14
apt-expressway.logitech.comIn scope2026-11-14
stage.ar.logitech.comstagingIn scope2026-11-14
artifactory.logitech.comtoolsIn scope2026-11-14
as2.logitech.comIn scope2026-11-14
assets.logitech.comIn scope2026-11-14
astro-firmware-guidelines.logitech.comIn scope2026-11-14
automation-cpqa.logitech.comIn scope2026-11-14
automation-qa.logitech.comtestIn scope2026-11-14
avis.logitech.comIn scope2026-11-14
aws13dims01.logitech.comIn scope2026-11-14
aws13jenkins03.logitech.comciIn scope2026-11-14
aws13jenkins04.logitech.comciIn scope2026-11-14
aws13tabpy01.logitech.comIn scope2026-11-14
aws13vcjenkinsstg01.logitech.comIn scope2026-11-14
b.logitech.comIn scope2026-11-14
b2b.logitech.comIn scope2026-11-14
docs.b2b-sfdc-prod.logitech.comIn scope2026-11-14
bounce.b2b.logitech.comIn scope2026-11-14
bcf.logitech.comIn scope2026-11-14
beta-marketplace.logitech.comstagingIn scope2026-11-14
blog.logitech.comIn scope2026-11-14
dev.blog.logitech.comdevIn scope2026-11-14
stage.blog.logitech.comstagingIn scope2026-11-14
blog7.logitech.comIn scope2026-11-14
blogdev.logitech.comIn scope2026-11-14
blogorigin.logitech.comIn scope2026-11-14
blogorigin2.logitech.comIn scope2026-11-14
blogstage.logitech.comIn scope2026-11-14
blogtest.logitech.comIn scope2026-11-14
bot-srv.logitech.comIn scope2026-11-14
brandassets.logitech.comIn scope2026-11-14
brandcenter.logitech.comIn scope2026-11-14
bts2015.logitech.comIn scope2026-11-14
www.bts2015.logitech.comIn scope2026-11-14
business.logitech.comIn scope2026-11-14
mail3706.business.logitech.commailIn scope2026-11-14
buy.logitech.comIn scope2026-11-14
buy-ue.logitech.comIn scope2026-11-14
capi.logitech.comIn scope2026-11-14
capiv2.logitech.comIn scope2026-11-14
2a57j77zpvwh5pcx73eck5zy00ncssj.capiv2.logitech.comIn scope2026-11-14
careers.logitech.comIn scope2026-11-14
www.careers.logitech.comIn scope2026-11-14
cart.logitech.comIn scope2026-11-14
cc-remote.logitech.comvpnIn scope2026-11-14
cdtautomation.logitech.comIn scope2026-11-14
centerstage.logitech.comIn scope2026-11-14
ch01vcse01.logitech.comIn scope2026-11-14
channel.logitech.comIn scope2026-11-14
checkout.logitech.comIn scope2026-11-14
circle2testen.logitech.comIn scope2026-11-14
www.circle2testen.logitech.comIn scope2026-11-14
citrix.logitech.comvpnIn scope2026-11-14
cloudapps.logitech.comIn scope2026-11-14
privacy.cn.logitech.comIn scope2026-11-14
cn02vcse01.logitech.comIn scope2026-11-14
collab-edge.logitech.comIn scope2026-11-14
collabplan-cert.logitech.comIn scope2026-11-14
comm-alert.logitech.comIn scope2026-11-14
commerce-dev.logitech.comdevIn scope2026-11-14
commerce-prd.logitech.comIn scope2026-11-14
commerce-stg.logitech.comstagingIn scope2026-11-14
community.logitech.comIn scope2026-11-14
companion.logitech.comIn scope2026-11-14
configurator.logitech.comIn scope2026-11-14
api.configurator.logitech.comapiIn scope2026-11-14
workspace-designer-bnguyen.dev.configurator.logitech.comdevIn scope2026-11-14
workspace-designer-lrajendran.dev.configurator.logitech.comdevIn scope2026-11-14
workspace-designer-pravichandran.dev.configurator.logitech.comdevIn scope2026-11-14
workspace-designer-rmaniraj.dev.configurator.logitech.comdevIn scope2026-11-14
workspace-studio-dev.dev.configurator.logitech.comdevIn scope2026-11-14
wss-dev-api.dev.configurator.logitech.comapi, devIn scope2026-11-14
staging.configurator.logitech.comstagingIn scope2026-11-14
staging-api.configurator.logitech.comapi, stagingIn scope2026-11-14
workspace-studio-sandbox.test.configurator.logitech.comtestIn scope2026-11-14
workspace-studio-stable.test.configurator.logitech.comtestIn scope2026-11-14
content.logitech.comIn scope2026-11-14
contest.logitech.comIn scope2026-11-14
contracts.logitech.comIn scope2026-11-14
www.contracts.logitech.comIn scope2026-11-14
contractsqa.logitech.comIn scope2026-11-14
corp.logitech.cominternalIn scope2026-11-14
chef.corp.logitech.cominternalIn scope2026-11-14
cosa.logitech.comIn scope2026-11-14
cpgbackup.logitech.comIn scope2026-11-14
cptest-cert.logitech.comIn scope2026-11-14
create-your-space.logitech.comIn scope2026-11-14
api.create-your-space.logitech.comapiIn scope2026-11-14
app.create-your-space.logitech.comIn scope2026-11-14
creative.logitech.comIn scope2026-11-14
www.creative.logitech.comIn scope2026-11-14
creatorcommunity.logitech.comIn scope2026-11-14
stage.ctrltomorrow.logitech.comstagingIn scope2026-11-14
datagenie.logitech.comIn scope2026-11-14
www.datagenie.logitech.comIn scope2026-11-14
design.logitech.comIn scope2026-11-14
dev-int.logitech.comdevIn scope2026-11-14

1,405 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.