Trevex: A Black-Box Detection Framework for Data-Flow Transient Execution Vulns