Salesforce says no bugs being exploited, but the hackers claim otherwise.