{"total":23,"rows":[{"id":"2306.13213","title":"Visual Adversarial Examples Jailbreak Aligned Large Language Models","created":"2023-06-22","cited_by_count":328,"area":"mllm"},{"id":"2307.14539","title":"Jailbreak in pieces: Compositional Adversarial Attacks on Multi-Modal Language Models","created":"2023-07-26","cited_by_count":273,"area":"mllm"},{"id":"2312.03777","title":"On the Robustness of Large Multimodal Models Against Image Adversarial Attacks","created":"2023-12-06","cited_by_count":92,"area":"mllm"},{"id":"2407.01599","title":"JailbreakZoo: Survey, Landscapes, and Horizons in Jailbreaking Large Language and Vision-Language Models","created":"2024-06-26","cited_by_count":70,"area":"mllm"},{"id":"2405.17894","title":"White-box Multimodal Jailbreaks Against Large Vision-Language Models","created":"2024-05-28","cited_by_count":59,"area":"mllm"},{"id":"2402.08577","title":"Test-Time Backdoor Attacks on Multimodal Large Language Models","created":"2024-02-13","cited_by_count":40,"area":"mllm"},{"id":"2311.16494","title":"ArGue: Attribute-Guided Prompt Tuning for Vision-Language Models","created":"2023-11-27","cited_by_count":39,"area":"mllm"},{"id":"2605.26501","title":"Unveiling the Fragility of Vision-Language Models: Multi-Modal Adversarial Synergy via Texture-Constrained Perturbations and Cross-Modal Optimization","created":"2026-05-26","cited_by_count":9,"area":"mllm"},{"id":"2112.05587","title":"Unified Multimodal Pre-training and Prompt-based Tuning for Vision-Language Understanding and Generation","created":"2021-12-10","cited_by_count":7,"area":"mllm"},{"id":"2411.07559","title":"Zer0-Jack: A Memory-efficient Gradient-based Jailbreaking Method for Black-box Multi-modal Large Language Models","created":"2024-11-12","cited_by_count":7,"area":"mllm"},{"id":"2504.11038","title":"QAVA: Query-Agnostic Visual Attack to Large Vision-Language Models","created":"2025-04-15","cited_by_count":7,"area":"mllm"},{"id":"2502.07987","title":"Universal Adversarial Attack on Aligned Multimodal LLMs","created":"2025-02-11","cited_by_count":6,"area":"mllm"},{"id":"2405.20090","title":"Transfer Attack for Bad and Good: Explain and Boost Adversarial Transferability across Multimodal Large Language Models","created":"2024-05-30","cited_by_count":5,"area":"mllm"},{"id":"2406.13294","title":"Enhancing Cross-Prompt Transferability in Vision-Language Models through Contextual Injection of Target Tokens","created":"2024-06-19","cited_by_count":4,"area":"mllm"},{"id":"2303.17169","title":"Task-Oriented Multi-Modal Mutual Leaning for Vision-Language Models","created":"2023-03-30","cited_by_count":3,"area":"mllm"},{"id":"2606.06890","title":"Diagnosing Visual Ignorance in Vision-Language Models","created":"2026-06-05","cited_by_count":2,"area":"mllm"},{"id":"2507.22933","title":"Augmented Vision-Language Models: A Systematic Review","created":"2025-07-24","cited_by_count":1,"area":"mllm"},{"id":"2604.04630","title":"Multimodal Backdoor Attack on VLMs for Autonomous Driving via Graffiti and Cross-Lingual Triggers","created":"2026-04-06","cited_by_count":1,"area":"mllm"},{"id":"2512.00343","title":"Assimilation Matters: Model-level Backdoor Detection in Vision-Language Pretrained Models","created":"2025-11-29","cited_by_count":0,"area":"mllm"},{"id":"2601.21220","title":"LAMP: Learning Universal Adversarial Perturbations for Multi-Image Tasks via Pre-trained Models","created":"2026-01-29","cited_by_count":0,"area":"mllm"},{"id":"2605.07399","title":"GPO-V: Jailbreak Diffusion Vision Language Model by Global Probability Optimization","created":"2026-05-08","cited_by_count":0,"area":"mllm"},{"id":"2608.07535","title":"Evolving Safety Landscape of Multi-modal Large Language Models: A Survey of Emerging Threats and Safeguards","created":"2026-07-27","cited_by_count":0,"area":"mllm"},{"id":"2610.11938","title":"Does Target Alignment Mean Target Recovery? An Evidence-Ladder Study of Adversarial Claims on Contrastive Encoders","created":"2026-10-08","cited_by_count":0,"area":"mllm"}],"next_cursor":null}