test for vulnpub