Muni system hacker hit others by scanning for year-old Java vulnerability