Samsung wssyncmlnps prior to 2015-10-31 allows directory traversal in a Kies restore, aka ZipFury.
samsung kies