vulnerable applications