test unverified vulns