Deadpull - Pandora Authentication Bypass and File Upload Exec

Replaces PR #2716 that is closed. Changes needed have been done, and module is according to msftity.rb.