vulnerability detection