gets all web vulns from workspace.
