Vulnerability and can start with args