detecting vulnerabilities