well retina is a good official tool for network vulnerability scanning, and it always has actual vulnerabilities...