app vulnerability research