Added writeups by neex

Author: man3kin3ko

BB-Reports.md

@@ -6,7 +6,7 @@
 
 # Schemes
 
->Attacking Redis db via CR symbols via `git://` link: https://hackerone.com/reports/441090
+[Attacking Redis db via CR symbols in `git://` link](https://hackerone.com/reports/441090)
 
 # Vulns
 
@@ -31,6 +31,14 @@ Redirection is found on reverse proxy and [can move you to internal servises (SS
 
 ## File upload
 
+Always look for the command injection if you have noticed that your files are edited or converted in some way.
+
+### Image
+
+Basically SVG files can be used to insert arbitary JavaScript code via `script` tag and even entire HTML-markup via the `foreignObject` tag: https://github.com/allanlw/svg-cheatsheet.
+
+If an old version of librsvg is used to convert SVG to PNG, it can cause a [memory leakage](https://hackerone.com/reports/2107680).
+
 ### Video
 
 [SSRF-LFR in FFmpeg](https://hackerone.com/reports/1062888)