{"total":29,"rows":[{"id":"2311.05608","title":"FigStep: Jailbreaking Large Vision-Language Models via Typographic Visual Prompts","created":"2023-11-09","cited_by_count":398,"area":"mllm"},{"id":"2306.13213","title":"Visual Adversarial Examples Jailbreak Aligned Large Language Models","created":"2023-06-22","cited_by_count":328,"area":"mllm"},{"id":"2307.14539","title":"Jailbreak in pieces: Compositional Adversarial Attacks on Multi-Modal Language Models","created":"2023-07-26","cited_by_count":273,"area":"mllm"},{"id":"2402.08567","title":"Agent Smith: A Single Image Can Jailbreak One Million Multimodal LLM Agents Exponentially Fast","created":"2024-02-13","cited_by_count":153,"area":"mllm"},{"id":"2312.03777","title":"On the Robustness of Large Multimodal Models Against Image Adversarial Attacks","created":"2023-12-06","cited_by_count":92,"area":"mllm"},{"id":"2403.08730","title":"Strengthening Multimodal Large Language Model with Bootstrapped Preference Optimization","created":"2024-03-13","cited_by_count":75,"area":"mllm"},{"id":"2403.02910","title":"ImgTrojan: Jailbreaking Vision-Language Models with ONE Image","created":"2024-03-05","cited_by_count":57,"area":"mllm"},{"id":"2406.07057","title":"MultiTrust: A Comprehensive Benchmark Towards Trustworthy Multimodal Large Language Models","created":"2024-06-11","cited_by_count":53,"area":"mllm"},{"id":"2407.15050","title":"Arondight: Red Teaming Large Vision Language Models with Auto-generated Multi-modal Jailbreak Prompts","created":"2024-07-21","cited_by_count":42,"area":"mllm"},{"id":"2406.14859","title":"From LLMs to MLLMs: Exploring the Landscape of Multimodal Jailbreaking","created":"2024-06-21","cited_by_count":24,"area":"mllm"},{"id":"2410.23687","title":"Adversarial Attacks of Vision Tasks in the Past 10 Years: A Survey","created":"2024-10-31","cited_by_count":23,"area":"mllm"},{"id":"2601.01592","title":"OpenRT: An Open-Source Red Teaming Framework for Multimodal LLMs","created":"2026-01-04","cited_by_count":21,"area":"mllm"},{"id":"2412.05892","title":"PBI-Attack: Prior-Guided Bimodal Interactive Black-Box Jailbreak Attack for Toxicity Maximization","created":"2024-12-08","cited_by_count":17,"area":"mllm"},{"id":"2405.04403","title":"Learning To See But Forgetting To Follow: Visual Instruction Tuning Makes LLMs More Prone To Jailbreak Attacks","created":"2024-05-07","cited_by_count":15,"area":"mllm"},{"id":"2505.15389","title":"Are Vision-Language Models Safe in the Wild? A Meme-Based Benchmark Study","created":"2025-05-21","cited_by_count":12,"area":"mllm"},{"id":"2509.21029","title":"FORCE: Transferable Visual Jailbreaking Attacks via Feature Over-Reliance CorrEction","created":"2025-09-25","cited_by_count":11,"area":"mllm"},{"id":"2512.20168","title":"Odysseus: Jailbreaking Commercial Multimodal LLM-integrated Systems via Dual Steganography","created":"2025-12-23","cited_by_count":8,"area":"mllm"},{"id":"2411.07559","title":"Zer0-Jack: A Memory-efficient Gradient-based Jailbreaking Method for Black-box Multi-modal Large Language Models","created":"2024-11-12","cited_by_count":7,"area":"mllm"},{"id":"2504.11038","title":"QAVA: Query-Agnostic Visual Attack to Large Vision-Language Models","created":"2025-04-15","cited_by_count":7,"area":"mllm"},{"id":"2501.09039","title":"Playing Devil's Advocate: Unmasking Toxicity and Vulnerabilities in Large Vision-Language Models","created":"2025-01-14","cited_by_count":2,"area":"mllm"},{"id":"2601.15698","title":"Beyond Visual Safety: Jailbreaking Multimodal Large Language Models for Harmful Image Generation via Semantic-Agnostic Inputs","created":"2026-01-22","cited_by_count":2,"area":"mllm"},{"id":"2505.21556","title":"Benign-to-Toxic Jailbreaking: Inducing Harmful Responses from Harmless Prompts","created":"2025-05-26","cited_by_count":1,"area":"mllm"},{"id":"2509.25533","title":"VISOR++: Universal Visual Inputs based Steering for Large Vision Language Models","created":"2025-09-29","cited_by_count":1,"area":"mllm"},{"id":"2510.09699","title":"VisualDAN: Exposing Vulnerabilities in VLMs with Visual-Driven DAN Commands","created":"2025-10-09","cited_by_count":1,"area":"mllm"},{"id":"2505.13302","title":"Images Amplify Misinformation Sharing in Vision-Language Models","created":"2025-05-19","cited_by_count":0,"area":"mllm"},{"id":"2508.08521","title":"VISOR: Visual Input-based Steering for Output Redirection in Vision-Language Models","created":"2025-08-11","cited_by_count":0,"area":"mllm"},{"id":"2509.25525","title":"Defeating Cerberus: Concept-Guided Privacy-Leakage Mitigation in Multimodal Language Models","created":"2025-09-29","cited_by_count":0,"area":"mllm"},{"id":"2602.18154","title":"FENCE: A Financial and Multimodal Jailbreak Detection Dataset","created":"2026-02-20","cited_by_count":0,"area":"mllm"},{"id":"2605.28013","title":"KSAFE-MM: A Multimodal Safety Benchmark via Localized Contextualization for Korean Cultural Risks","created":"2026-05-27","cited_by_count":0,"area":"mllm"}],"next_cursor":null}