Reports that do not include proof-of-concept exploitation of vulnerabilities and the ability to access sensitive user, third party or Livesport group data

Attacks requiring physical access to a user's device

Any physical attacks on Livesport's datacenter infrastructure or assets

Attacks on employees or contractors using social engineering techniques

Reporting of non-existent links on our websites that point to Livesport Group domains

Attacks that may cause a Denial of Service (DoS) on Livesport Group websites and applications at the application or network layer

Creating duplicate user accounts or accounts without verifying the actual ownership of the email address

Any form of "non-authenticated" clickjacking or tapjacking

Any security reports from automated tools

XSS that are not stored

Any reports of insufficiently secure SSL/TLS ciphers without functional proof-of-concept abuse- against production infrastructure