Unpatched Firefox 1.5 exploit made public