Not sure where to ask this but... where is the vuln-managment.conf pack getting its list of vulns from ? exploitdb or other?