local vulnerability detection