Skip to content

Bug bounty program

Platform
HackerOne
Bounties
Pays
Assets in scope
86
Disclosed reports
15
Subdomains
7,102
Vendor on CyberSIXT
Logitech (26 CVEs, 0 exploited)

Most upvoted reports15

All reports
Most upvoted reports of Logitech
ReportWeaknessDisclosedBountyVotes
One Click Account takeover using Ouath CSRF bypass by adding Null byte %00 in state parameter on www.streamlabs.comAnalysed#1046630Cross-Site Request Forgery2021-01-06–99
Manipulating response leads to free access to Streamlabs PrimeAnalysed#1070510Input Validation and Logic2021-01-21–80
Stored XSS in [https://streamlabs.com/dashboard#/*goal] pagesAnalysed#1049012Cross-site Scripting2020-12-26–68
IDOR when creating App on [platform.streamlabs.com/api/v1/store/whitelist] with user_id fieldAnalysed#983070Insecure Direct Object Reference2020-11-26–61
session takeover via open protocol redirection on streamlabs.comAnalysed#1178239Open Redirect2021-09-01$20050
CSRF in changing users donation_settings [https://streamlabs.com/api/v6/viewer-portal/viewer-settings/donation_settings]Analysed#1049360Cross-Site Request Forgery2020-12-26–49
SSRF allows reading AWS EC2 metadata using "readapi" variable in Streamlabs CloudbotAnalysed#1108418Server-Side Request Forgery2021-02-24$20041
Privilege Escalation Leads to Control The Owner Access Token Which leads to control the stream [streamlabs.com]Analysed#1174527Access Control2021-04-27–38
Host Header injection in oslo.io (using X-Forwarded-For header) leading to email spoofingAnalysed#1072277Input Validation and Logic2021-01-07–37
Sensitive information disclosure to shared access user via streamlabs platform apiAnalysed#1072893Information Disclosure2021-01-20$20036

Subdomains7,102

Subdomains of Logitech
NameScopeFirst seen
corp.staging-jira.logitech.cominternal, staging, toolsIn scope2026-11-14
status.logitech.commonitoringIn scope2026-11-14
stg-datagenie.logitech.comstagingIn scope2026-11-14
www.stg-datagenie.logitech.comstagingIn scope2026-11-14
store.logitech.comIn scope2026-11-14
reports.streamlabs.logitech.comIn scope2026-11-14
supplier.logitech.comIn scope2026-11-14
support.logitech.comIn scope2026-11-14
support1.logitech.comIn scope2026-11-14
svcs-aps.logitech.comIn scope2026-11-14
swdata-insights.logitech.comIn scope2026-11-14
sync.logitech.comIn scope2026-11-14
amazon.sync.logitech.comIn scope2026-11-14
auth.sync.logitech.comauthIn scope2026-11-14
auth-ca.sync.logitech.comauthIn scope2026-11-14
auth-fr.sync.logitech.comauthIn scope2026-11-14
ca.sync.logitech.comIn scope2026-11-14
demo.sync.logitech.comtestIn scope2026-11-14
fr.sync.logitech.comIn scope2026-11-14
hub.sync.logitech.comIn scope2026-11-14
de.hub.sync.logitech.comIn scope2026-11-14
es.hub.sync.logitech.comIn scope2026-11-14
fi.hub.sync.logitech.comIn scope2026-11-14
fr.hub.sync.logitech.comIn scope2026-11-14
it.hub.sync.logitech.comIn scope2026-11-14
ja.hub.sync.logitech.comIn scope2026-11-14
ko.hub.sync.logitech.comIn scope2026-11-14
nl.hub.sync.logitech.comIn scope2026-11-14
pt.hub.sync.logitech.comIn scope2026-11-14
zh-cn.hub.sync.logitech.comIn scope2026-11-14
zh-tw.hub.sync.logitech.comIn scope2026-11-14
shop.sync.logitech.comIn scope2026-11-14
t-shape.logitech.comIn scope2026-11-14
www.t-shape.logitech.comIn scope2026-11-14
teamcity.logitech.comciIn scope2026-11-14
uat.techscout.logitech.comtestIn scope2026-11-14
tenableot.logitech.comIn scope2026-11-14
tenablesc.logitech.comIn scope2026-11-14
test123.logitech.comtestIn scope2026-11-14
trade-in.logitech.comIn scope2026-11-14
travelereu.logitech.comIn scope2026-11-14
ttp-cert.logitech.comIn scope2026-11-14
tw01n08.logitech.comIn scope2026-11-14
tw01vcse01.logitech.comIn scope2026-11-14
twepp.logitech.comIn scope2026-11-14
twwarranty.logitech.comIn scope2026-11-14
u003ewww.logitech.comIn scope2026-11-14
uat-help.logitech.comtestIn scope2026-11-14
corp.uat-help.logitech.cominternal, testIn scope2026-11-14
uat-jira.logitech.comtest, toolsIn scope2026-11-14
corp.uat-jira.logitech.cominternal, test, toolsIn scope2026-11-14
eng.uat-jira.logitech.comtest, toolsIn scope2026-11-14
uat-twepp.logitech.comtestIn scope2026-11-14
uat-twwarranty.logitech.comtestIn scope2026-11-14
uat-wicselect.logitech.comtestIn scope2026-11-14
uat-wicselect-china.logitech.comtestIn scope2026-11-14
uat-wiki.logitech.comtest, toolsIn scope2026-11-14
corp.uat-wiki.logitech.cominternal, test, toolsIn scope2026-11-14
ue.logitech.comIn scope2026-11-14
ue-dev.logitech.comdevIn scope2026-11-14
ue-prd.logitech.comIn scope2026-11-14
ue-qa.logitech.comtestIn scope2026-11-14
ue-stg.logitech.comstagingIn scope2026-11-14
ue-support.logitech.comIn scope2026-11-14
uemobileservices.logitech.comIn scope2026-11-14
uk.logitech.comIn scope2026-11-14
ultimateears.logitech.comIn scope2026-11-14
reports.ultimateears.logitech.comIn scope2026-11-14
updates.logitech.comIn scope2026-11-14
updates-beta.logitech.comstagingIn scope2026-11-14
updates-beta-new.logitech.comstagingIn scope2026-11-14
updates-perf.logitech.comtestIn scope2026-11-14
updates-qa01.logitech.comIn scope2026-11-14
uptime.logitech.comIn scope2026-11-14
us01m02.logitech.comIn scope2026-11-14
us01n08.logitech.comIn scope2026-11-14
us01n12.logitech.comIn scope2026-11-14
us01n14.logitech.comIn scope2026-11-14
us01n21.logitech.comIn scope2026-11-14
us01r05-3-t1-gx-inet.logitech.comIn scope2026-11-14
us01r50-t3-gx-inet.logitech.comIn scope2026-11-14
us01s154.logitech.comIn scope2026-11-14
us01u02.logitech.comIn scope2026-11-14
us01vcse01.logitech.comIn scope2026-11-14
us04apollo01.logitech.comIn scope2026-11-14
us04mail02.logitech.commailIn scope2026-11-14
us04n08.logitech.comIn scope2026-11-14
vc.logitech.comIn scope2026-11-14
amz.vc.logitech.comIn scope2026-11-14
iot.us-west-2.amz.vc.logitech.comIn scope2026-11-14
iot.ca-central-1.vc.logitech.comIn scope2026-11-14
dev.vc.logitech.comdevIn scope2026-11-14
collabos-device-management.dev.vc.logitech.comadmin, devIn scope2026-11-14
drs.dev.vc.logitech.comdevIn scope2026-11-14
prajith.dev.vc.logitech.comdevIn scope2026-11-14
quicklook.dev.vc.logitech.comdevIn scope2026-11-14
iot.ca-central-1.raiden.dev.vc.logitech.comdevIn scope2026-11-14
iot.eu-central-1.raiden.dev.vc.logitech.comdevIn scope2026-11-14
iot.eu-west-3.raiden.dev.vc.logitech.comdevIn scope2026-11-14
iot.us-east-1.raiden.dev.vc.logitech.comdevIn scope2026-11-14

1,405 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.