Use the term "exploit" is a little more correctly

So Metasploit uses the term "exploit" to describe something, a module
or an action, that results popping a shell. A check normally doesn't
pop a shell, so avoid that language.

lib/msf/core/exploit.rb

@@ -95,8 +95,8 @@ class Exploit < Msf::Module
     Appears     = [ 'appears', "The target appears to be vulnerable." ]
 
     #
-    # The target is vulnerable. Only used if the check is able to actually exploit the bug,
-    # and obtain hard evidence. For example: executing a command on the target machine, and
+    # The target is vulnerable. Only used if the check is able to actually take advantage of the
+    # bug, and obtain hard evidence. For example: executing a command on the target machine, and
     # retrieve the output.
     #
     Vulnerable  = [ 'vulnerable', "The target is vulnerable." ]