string concatenation, clear \ handling

Author: lilou1337

modules/exploits/windows/local/lenovo_systemupdate.rb

@@ -125,7 +125,7 @@ def get_security_token(lenovo_directory)
 
 
   def config_service(lenovo_directory, option)
-    cmd_exec(lenovo_directory + "ConfigService.exe #{option}")
+    cmd_exec("#{lenovo_directory}\\ConfigService.exe #{option}")
   end
 
 
@@ -134,8 +134,7 @@ def exploit
       fail_with(Failure::NoTarget, 'Session is already elevated')
     end
 
-    su_directory = service_info('SUService')[:path][1..-15]
-
+    su_directory = service_info('SUService')[:path][1..-16]
     print_status("Starting service via ConfigService.exe")
     config_service(su_directory, "start")
     print_status("Giving the service some time to start...")