Unpatched Java vulnerability exploited in targeted attacks, researchers say