Noticia:
http://thehackernews.com/2016/10/joomla-security-update.html
Paper:
https://medium.com/@showthread/joomla-3-6-4-account-creation-elevated-privileges-write-up-and-exploit-965d8fb46fa2#.jfkwrqyvk
Exploit:
https://gist.github.com/melvinsh/4b28f78ace12ec0c02b183bbadc76da8