app vulnerability checklist