vulnerability detection and remediation