{"total":32,"rows":[{"id":"2309.11751","title":"How Robust is Google's Bard to Adversarial Image Attacks?","created":"2023-09-21","cited_by_count":183,"area":"mllm"},{"id":"2407.01599","title":"JailbreakZoo: Survey, Landscapes, and Horizons in Jailbreaking Large Language and Vision-Language Models","created":"2024-06-26","cited_by_count":70,"area":"mllm"},{"id":"2504.14348","title":"Manipulating Multimodal Agents via Cross-Modal Prompt Injection","created":"2025-04-19","cited_by_count":44,"area":"mllm"},{"id":"2411.15720","title":"Chain of Attack: On the Robustness of Vision-Language Models Against Transfer-Based Adversarial Attacks","created":"2024-11-24","cited_by_count":39,"area":"mllm"},{"id":"2404.10335","title":"Efficient Generation of Targeted and Transferable Adversarial Examples for Vision-Language Models Via Diffusion Models","created":"2024-04-16","cited_by_count":38,"area":"mllm"},{"id":"2503.10635","title":"A Frustratingly Simple Yet Highly Effective Attack Baseline: Over 90% Success Rate Against the Strong Black-box Models of GPT-4.5/4o/o1","created":"2025-03-13","cited_by_count":37,"area":"mllm"},{"id":"2410.23687","title":"Adversarial Attacks of Vision Tasks in the Past 10 Years: A Survey","created":"2024-10-31","cited_by_count":23,"area":"mllm"},{"id":"2505.05528","title":"X-Transfer Attacks: Towards Super Transferable Adversarial Attacks on CLIP","created":"2025-05-08","cited_by_count":21,"area":"mllm"},{"id":"2406.09250","title":"MirrorCheck: Efficient Adversarial Defense for Vision-Language Models","created":"2024-06-13","cited_by_count":19,"area":"mllm"},{"id":"2404.11207","title":"Exploring the Transferability of Visual Prompting for Multimodal Large Language Models","created":"2024-04-17","cited_by_count":15,"area":"mllm"},{"id":"2509.21029","title":"FORCE: Transferable Visual Jailbreaking Attacks via Feature Over-Reliance CorrEction","created":"2025-09-25","cited_by_count":11,"area":"mllm"},{"id":"2505.01050","title":"Transferable Adversarial Attacks on Black-Box Vision-Language Models","created":"2025-05-02","cited_by_count":10,"area":"mllm"},{"id":"2505.19610","title":"JailBound: Jailbreaking Internal Safety Boundaries of Vision-Language Models","created":"2025-05-26","cited_by_count":10,"area":"mllm"},{"id":"2505.17440","title":"VEAttack: Downstream-agnostic Vision Encoder Attack against Large Vision Language Models","created":"2025-05-23","cited_by_count":8,"area":"mllm"},{"id":"2602.17645","title":"Pushing the Frontier of Black-Box LVLM Attacks via Fine-Grained Detail Targeting","created":"2026-02-19","cited_by_count":6,"area":"mllm"},{"id":"2508.15370","title":"Unveiling Trust in Multimodal Large Language Models: Evaluation, Analysis, and Mitigation","created":"2025-08-21","cited_by_count":4,"area":"mllm"},{"id":"2506.12706","title":"NAP-Tuning: Neural Augmented Prompt Tuning for Adversarially Robust Vision-Language Models","created":"2025-06-15","cited_by_count":3,"area":"mllm"},{"id":"2511.15435","title":"HV-Attack: Hierarchical Visual Attack for Multimodal Retrieval Augmented Generation","created":"2025-11-19","cited_by_count":3,"area":"mllm"},{"id":"2511.20494","title":"Adversarial Confusion Attack: Disrupting Multimodal Large Language Models","created":"2025-11-25","cited_by_count":3,"area":"mllm"},{"id":"2505.23266","title":"Disrupting Vision-Language Model-Driven Navigation Services via Adversarial Object Fusion","created":"2025-05-29","cited_by_count":2,"area":"mllm"},{"id":"2603.16960","title":"Adversarial attacks against Modern Vision-Language Models","created":"2026-03-17","cited_by_count":2,"area":"mllm"},{"id":"2506.12336","title":"Benchmarking the Trustworthiness in Multimodal LLMs for Video Understanding","created":"2025-06-14","cited_by_count":1,"area":"mllm"},{"id":"2506.21874","title":"On the Feasibility of Poisoning Text-to-Image AI Models via Adversarial Mislabeling","created":"2025-06-27","cited_by_count":1,"area":"mllm"},{"id":"2508.09230","title":"Cowpox: Towards the Immunity of VLM-based Multi-Agent Systems","created":"2025-08-12","cited_by_count":1,"area":"mllm"},{"id":"2509.25533","title":"VISOR++: Universal Visual Inputs based Steering for Large Vision Language Models","created":"2025-09-29","cited_by_count":1,"area":"mllm"},{"id":"2510.09849","title":"Text Prompt Injection of Vision Language Models","created":"2025-10-10","cited_by_count":1,"area":"mllm"},{"id":"2604.17318","title":"When Background Matters: Breaking Medical Vision Language Models by Transferable Attack","created":"2026-04-19","cited_by_count":1,"area":"mllm"},{"id":"2605.07447","title":"Sparse Autoencoders as Plug-and-Play Firewalls for Adversarial Attack Detection in VLMs","created":"2026-05-08","cited_by_count":1,"area":"mllm"},{"id":"2506.06729","title":"Mitigating Object Hallucination via Robust Local Perception Search","created":"2025-06-07","cited_by_count":0,"area":"mllm"},{"id":"2604.25102","title":"One Perturbation, Two Failure Modes: Probing VLM Safety via Embedding-Guided Typographic Perturbations","created":"2026-04-28","cited_by_count":0,"area":"mllm"},{"id":"2606.07706","title":"MLingualFC: Evaluating Jailbreak Vulnerabilities in Multilingual Vision-Language Models","created":"2026-06-05","cited_by_count":0,"area":"mllm"},{"id":"2606.10571","title":"Improving Adversarial Transferability on Vision-Language Pre-training Models via Surrogate-Specific Bias Correction","created":"2026-06-09","cited_by_count":0,"area":"mllm"}],"next_cursor":null}