Likely 0-day
Detected Owncast using default admin credentials admin:abc123. The admin API was accessible via HTTP Basic authentication, allowing full server configuration access.
id: owncast-default-login
info:
name: Owncast - Default Credentials
author: 0x_Akoko
severity
...