I think what the OP was asking about and what Beck38 addressed was extra content added to the NZB that is actually hosted on a news server. And, as Beck38 poited out,
It is entirely possible that the creator of a NZB could point your newsreader to some malicious file which one could...