vulnerable call chain detection