Olole xog-xadis ah oo loo yaqaan “City-Forum” ayaa xog ka ururinaya bogagga Salesforce Experience Cloud iyo ServiceNow ee qaabeyntooda lagu khaldamay. Sida ay sheegeen cilmi-baarayaasha amniga ee Reco, weeraryahanku wuxuu adeegsanayaa qalab gaar ah si uu ula baxo xog ay hay’aduhu si kama’ ah ugu banneeyeen booqdayaasha aan la diiwaangelin. Weerarradu weli way socdaan, dhaqdhaqaaqooduna wuu sii kordhayaa. Raadka farsamo ee ololahan ayaa si weyn isugu mid ah. Reco ayaa sheegtay in dhammaan weerarrada ay aragtay ay ka imanayaan hal cinwaan IP ah, 158.220.87.79, kaas oo ay martigeliso shirkadda Jarmalka ah ee Contabo oo bixisa adeegyada VPS. Cinwaankan IP-ga ah ayaa lala xiriiriyay barta city-forum.com tan iyo ugu yaraan Maarso 2025. Weeraryahanku wuxuu marka uu xogta soo dejinayo inta badan adeegsadaa aqoonsiga caadiga ah ee Go-http-client/1.1, taas oo abuurtay raad laga arkay hay’ado badan oo la beegsaday. Ololahani kama faa’iideysanayo daldaloolo ku jira Salesforce ama ServiceNow. Wuxuu xogta kala baxayaa bogag ay hay’aduhu si aan ula kac ahayn ugu banneeyeen akoonnada martida, taas oo ka dhalan karta xeerar wadaag oo aad u dabacsan, oggolaansho xad-dhaaf ah ama qaabeyn khaldan. Labada barnaamijba waxay akoonnada martida u adeegsadaan booqdayaasha aan la diiwaangelin, sidaas darteed xog kasta oo akoonnadaas loo fasaxo waxaa laga heli karaa internetka iyadoo la adeegsanayo isku-xirayaasha API-ga. Reco ayaa ilaa hadda aragtay oo keliya dhaqdhaqaaqyo ay sameeyeen akoonnada martida, inkasta oo aysan meesha ka saarin suurtagalnimada adeegsiga akoonno la xaqiijiyay. Salesforce, inta badan dhaqdhaqaaqa la arkay wuxuu beegsanayaa bogagga lagu dhisay nidaamka hore ee Aura. Weeraryahanku wuxuu codsiyo u diraa isku-xirayaasha `/aura` ama `/s/sfsites/aura` si uu u ogaado walxaha xogeed sida Accounts, Contacts iyo Cases ee dadweynaha u furan. Reco ayaa sheegtay inuu marka hore adeegsado `HostConfigController.getConfigData` si uu u tiriyo walxaha uu akoonka martidu geli karo, dabadeedna uu isticmaalo `SelectableListDataProviderController.getItems` si uu ula baxo diiwaannada la heli karo. Bartii ugu mashquulka badnayd waxaa laga diiwaangeliyay in ka badan 560,000 oo dhacdo oo ka timid cinwaanka IP-ga ee weeraryahanka, kuwaas oo ku dhowaad dhammaantood la xiriiray baaritaanka Aura ee akoonnada martida. Ku takrifalka isku-xirayaasha Aura hore ayaa loogu arkay ololeyaal xog-xadis ah oo ay fuliyeen ShinyHunters, balse weeraryahanka City-Forum wuxuu sidoo kale beegsanayaa bogagga Salesforce ee lagu dhisay Lightning Web Runtime (LWR). Bogaggaas, wuxuu adeegsadaa UI API-ga Salesforce si uu codsiyo GraphQL ah ugu diro `/webruntime/api/services/data/{version}/graphql` ugana soo saaro xogta loo banneeyay akoonnada martida. Reco ma arag qalab weerar oo dadweyne oo adeegsada farsamadan. Weeraryahanku wuxuu kaloo baarayaa isku-xirayaasha `/SiteRegister` iyo `/CommunitiesSelfReg` si uu u ogaado in is-diiwaangelintu furan tahay, taas oo martida u saamixi karta inay samaysato akoon dibadeed oo la xaqiijiyay, lehna marin ka ballaaran. Isla weeraryahanka ayaa sidoo kale beegsanaya ServiceNow Service Portals isaga oo adeegsanaya isku-xiraha `POST /api/now/sp/search?sysparm_cancelable=true`. Reco ayaa sheegtay inaysan hore u arag isku-xirahan oo weerarro sidan oo kale ah loogu adeegsado. Weeraryahanku wuxuu beddeli karaa ereyada raadinta si uu u tiriyo xogta bannaan. Mid ka mid ah nidaamyadii la baaray, codsiyadu waxay ka kordheen tobannaan ilaa boqollaal maalintii. Maadaama diiwaannada ServiceNow aysan kaydin qaybta gudaha ee codsiyada POST, maamulayaashu way arki karaan in baaritaanno otomaatig ah dhaceen iyo inta xog ah ee la soo celiyay, balse ma ogaan karaan ereyada saxda ah ee la raadiyay. Inkasta oo qaar ka mid ah dhaqdhaqaaqyada Salesforce ay la mid yihiin weerarradii hore ee ShinyHunters, Reco ayaa sheegtay inaan wax caddeyn ahi jirin oo ololahan ku xiraysa kooxdaas. Ololeyaashii hore ee ShinyHunters waxay adeegsan jireen nidaamyo iyo cinwaanno IP oo kala duwan, halka kaabayaasha City-Forum ay isla cinwaanka IP-ga ku sugnaayeen tan iyo Maarso 2025. Maamulayaasha Salesforce waxaa lagula taliyay inay dib u eegaan xeerarka wadaagga ee akoonnada martida, oggolaanshaha walxaha iyo qaybaha xogta, gelitaanka faylasha, muuqaalka xubnaha iyo dejimaha is-diiwaangelinta. Bogagga LWR, Reco waxay ku talisay in la damiyo dookha Experience Builder ee martida u oggolaanaya inay galaan API-yada dadweynaha marka aan loo baahnayn. Maamulayaasha ServiceNow waa inay dib u eegaan ilaha raadinta ee laga heli karo Service Portals, iyaga oo xaqiijinaya in ilaha haya xogta xasaasiga ah lagu ilaaliyo xaqiijin iyo xakameyn gelitaan oo adag. Hay’ad kasta oo Soomaaliyeed oo adeegsata Salesforce ama ServiceNow waxay si toos ah khatartan u yareyn kartaa iyadoo xaddidaysa marin-u-helka martida; haddii xogtu bog dadweyne uga furan tahay akoon aan la xaqiijin, qalab otomaatig ah ayaa heli kara iyada oo aan loo baahnayn daldalool softiweer.