Hackers are exploiting critical flaw in vBulletin forum software