HealthMonitor 3.1 Unquoted Service Path Vulnerability

Exploit Title: HealthMonitor 3.1 - Unquoted Service Path Discovery by: yunaranyancat Vendor Homepage: https://sourceforge.net/projects/healthmonitor/ Software Link : https://sourceforge.net/projects/healthmonitor/files/HealthMonitor%20Application/3.1%20Stable/HealthMonitor3.1Stable.zip/download...

Code injection

The Pronestor PNHM aka Health Monitoring or HealthMonitor add-in before 8.1.13.0 for Outlook has "BUILTIN\Users:IF" permissions for the "%PROGRAMFILESX86%\proNestor\Outlook add-in for Pronestor\PronestorHealthMonitor.exe" file, which allows local users to gain privileges via a Trojan horse...

CVE-2018-19113

Vulnerability summary (CVE-2018-19113) : The Pronestor Health Monitor add-in for Outlook (PNHM), prior to version 8.1.13.0, stores weak file permissions on the PronestorHealthMonitor.exe binary in the Program Files path: BUILTIN\Users:(I)(F). This enables local users to escalate to SYSTEM via a T...