vuln tests fixes, hopefully