{"total":17,"rows":[{"id":"2311.05608","title":"FigStep: Jailbreaking Large Vision-Language Models via Typographic Visual Prompts","created":"2023-11-09","cited_by_count":398,"area":"mllm"},{"id":"2402.08567","title":"Agent Smith: A Single Image Can Jailbreak One Million Multimodal LLM Agents Exponentially Fast","created":"2024-02-13","cited_by_count":153,"area":"mllm"},{"id":"2407.01599","title":"JailbreakZoo: Survey, Landscapes, and Horizons in Jailbreaking Large Language and Vision-Language Models","created":"2024-06-26","cited_by_count":70,"area":"mllm"},{"id":"2501.04931","title":"Jailbreaking Multimodal Large Language Models via Shuffle Inconsistency","created":"2025-01-09","cited_by_count":51,"area":"mllm"},{"id":"2405.12523","title":"Single Image Unlearning: Efficient Machine Unlearning in Multimodal Large Language Models","created":"2024-05-21","cited_by_count":46,"area":"mllm"},{"id":"2506.14697","title":"AGENTSAFE: Benchmarking the Safety of Embodied Agents on Hazardous Instructions","created":"2025-06-17","cited_by_count":38,"area":"mllm"},{"id":"2406.02575","title":"Cross-Modal Safety Alignment: Is textual unlearning all you need?","created":"2024-05-27","cited_by_count":25,"area":"mllm"},{"id":"2601.01592","title":"OpenRT: An Open-Source Red Teaming Framework for Multimodal LLMs","created":"2026-01-04","cited_by_count":21,"area":"mllm"},{"id":"2506.12430","title":"Pushing the Limits of Safety: A Technical Report on the ATLAS Challenge 2025","created":"2025-06-14","cited_by_count":12,"area":"mllm"},{"id":"2601.15698","title":"Beyond Visual Safety: Jailbreaking Multimodal Large Language Models for Harmful Image Generation via Semantic-Agnostic Inputs","created":"2026-01-22","cited_by_count":2,"area":"mllm"},{"id":"2601.22737","title":"Lingua-SafetyBench: A Benchmark for Safety Evaluation of Multilingual Vision-Language Models","created":"2026-01-30","cited_by_count":2,"area":"mllm"},{"id":"2605.19328","title":"RoboJailBench: Benchmarking Adversarial Attacks and Defenses in Embodied Robotic Agents","created":"2026-05-19","cited_by_count":2,"area":"mllm"},{"id":"2505.21556","title":"Benign-to-Toxic Jailbreaking: Inducing Harmful Responses from Harmless Prompts","created":"2025-05-26","cited_by_count":1,"area":"mllm"},{"id":"2604.08846","title":"Dictionary-Aligned Concept Control for Safeguarding Multimodal LLMs","created":"2026-04-10","cited_by_count":0,"area":"mllm"},{"id":"2605.23157","title":"Same Model, Different Weakness: How Language and Modality Reshape the Jailbreak Attack Surface in Frontier MLLMs","created":"2026-05-22","cited_by_count":0,"area":"mllm"},{"id":"2606.19727","title":"NRITYAM: Language Models Meet Art and Heritage of Dance","created":"2026-06-18","cited_by_count":0,"area":"mllm"},{"id":"2609.39662","title":"Typographic Attack Against VLM-based AI-generated Image Detection","created":"2026-09-30","cited_by_count":0,"area":"mllm"}],"next_cursor":null}