{"total":58,"rows":[{"id":"2311.05608","title":"FigStep: Jailbreaking Large Vision-Language Models via Typographic Visual Prompts","created":"2023-11-09","cited_by_count":398,"area":"mllm"},{"id":"2402.08567","title":"Agent Smith: A Single Image Can Jailbreak One Million Multimodal LLM Agents Exponentially Fast","created":"2024-02-13","cited_by_count":153,"area":"mllm"},{"id":"2403.09792","title":"Images are Achilles' Heel of Alignment: Exploiting Visual Vulnerabilities for Jailbreaking Multimodal Large Language Models","created":"2024-03-14","cited_by_count":136,"area":"mllm"},{"id":"2406.04031","title":"Jailbreak Vision Language Models via Bi-Modal Adversarial Prompt","created":"2024-06-06","cited_by_count":109,"area":"mllm"},{"id":"2407.01599","title":"JailbreakZoo: Survey, Landscapes, and Horizons in Jailbreaking Large Language and Vision-Language Models","created":"2024-06-26","cited_by_count":70,"area":"mllm"},{"id":"2402.10670","title":"OpenFMNav: Towards Open-Set Zero-Shot Object Navigation via Vision-Language Foundation Models","created":"2024-02-16","cited_by_count":67,"area":"mllm"},{"id":"2403.02910","title":"ImgTrojan: Jailbreaking Vision-Language Models with ONE Image","created":"2024-03-05","cited_by_count":57,"area":"mllm"},{"id":"2407.15050","title":"Arondight: Red Teaming Large Vision Language Models with Auto-generated Multi-modal Jailbreak Prompts","created":"2024-07-21","cited_by_count":42,"area":"mllm"},{"id":"2404.10618","title":"Private Attribute Inference from Images with Vision-Language Models","created":"2024-04-16","cited_by_count":37,"area":"mllm"},{"id":"2410.23861","title":"Audio Is the Achilles' Heel: Red Teaming Audio Large Multimodal Models","created":"2024-10-31","cited_by_count":37,"area":"mllm"},{"id":"2411.00827","title":"IDEATOR: Jailbreaking and Benchmarking Large Vision-Language Models Using Themselves","created":"2024-10-29","cited_by_count":37,"area":"mllm"},{"id":"2405.10529","title":"Safeguarding Vision-Language Models Against Patched Visual Prompt Injectors","created":"2024-05-17","cited_by_count":27,"area":"mllm"},{"id":"2407.21659","title":"Cross-modality Information Check for Detecting Jailbreaking in Multimodal Large Language Models","created":"2024-07-31","cited_by_count":25,"area":"mllm"},{"id":"2406.14859","title":"From LLMs to MLLMs: Exploring the Landscape of Multimodal Jailbreaking","created":"2024-06-21","cited_by_count":24,"area":"mllm"},{"id":"2410.23687","title":"Adversarial Attacks of Vision Tasks in the Past 10 Years: A Survey","created":"2024-10-31","cited_by_count":23,"area":"mllm"},{"id":"2404.05264","title":"Unbridled Icarus: A Survey of the Potential Perils of Image Inputs in Multimodal Large Language Model Security","created":"2024-04-08","cited_by_count":19,"area":"mllm"},{"id":"2411.01703","title":"UniGuard: Towards Universal Safety Guardrails for Jailbreak Attacks on Multimodal Large Language Models","created":"2024-11-03","cited_by_count":19,"area":"mllm"},{"id":"2405.08317","title":"SpeechGuard: Exploring the Adversarial Robustness of Multimodal Large Language Models","created":"2024-05-14","cited_by_count":18,"area":"mllm"},{"id":"2410.00296","title":"VLMGuard: Bootstrapping Malicious Prompt Detectors from Unlabeled Vision-Language Prompts in the Wild","created":"2024-10-01","cited_by_count":18,"area":"mllm"},{"id":"2411.18000","title":"Exploring Visual Vulnerabilities via Multi-Loss Adversarial Search for Jailbreaking Vision-Language Models","created":"2024-11-27","cited_by_count":12,"area":"mllm"},{"id":"2502.12562","title":"SEA: Low-Resource Safety Alignment for Multimodal Large Language Models via Synthetic Embeddings","created":"2025-02-18","cited_by_count":11,"area":"mllm"},{"id":"2508.05087","title":"JPS: Jailbreak Multimodal Large Language Models with Collaborative Visual Perturbation and Textual Steering","created":"2025-08-07","cited_by_count":11,"area":"mllm"},{"id":"2509.21029","title":"FORCE: Transferable Visual Jailbreaking Attacks via Feature Over-Reliance CorrEction","created":"2025-09-25","cited_by_count":11,"area":"mllm"},{"id":"2505.01050","title":"Transferable Adversarial Attacks on Black-Box Vision-Language Models","created":"2025-05-02","cited_by_count":10,"area":"mllm"},{"id":"2602.12158","title":"SafeNeuron: Neuron-Level Safety Alignment for Large Language Models","created":"2026-02-12","cited_by_count":10,"area":"mllm"},{"id":"2506.01307","title":"Align is not Enough: Multimodal Universal Jailbreak Attack against Multimodal Large Language Models","created":"2025-06-02","cited_by_count":9,"area":"mllm"},{"id":"2504.01444","title":"PiCo: Jailbreaking Multimodal Large Language Models via Pictorial Code Contextualization","created":"2025-04-02","cited_by_count":8,"area":"mllm"},{"id":"2506.16760","title":"Cross-Modal Obfuscation for Jailbreak Attacks on Large Vision-Language Models","created":"2025-06-20","cited_by_count":6,"area":"mllm"},{"id":"2503.11750","title":"Making Every Step Effective: Jailbreaking Large Vision-Language Models Through Hierarchical KV Equalization","created":"2025-03-14","cited_by_count":4,"area":"mllm"},{"id":"2508.01741","title":"Simulated Ensemble Attack: Transferring Jailbreaks Across Fine-tuned Vision-Language Models","created":"2025-08-03","cited_by_count":4,"area":"mllm"},{"id":"2508.09218","title":"Towards Effective MLLM Jailbreaking Through Balanced On-Topicness and OOD-Intensity","created":"2025-08-11","cited_by_count":4,"area":"mllm"},{"id":"2602.01025","title":"Toward Universal and Transferable Jailbreak Attacks on Vision-Language Models","created":"2026-02-01","cited_by_count":4,"area":"mllm"},{"id":"2508.06142","title":"SDEval: Safety Dynamic Evaluation for Multimodal Large Language Models","created":"2025-08-08","cited_by_count":3,"area":"mllm"},{"id":"2512.18264","title":"Who Can See Through You? Adversarial Shielding Against VLM-Based Attribute Inference Attacks","created":"2025-12-20","cited_by_count":3,"area":"mllm"},{"id":"2603.22882","title":"TreeTeaming: Autonomous Red-Teaming of Vision-Language Models via Hierarchical Strategy Exploration","created":"2026-03-24","cited_by_count":3,"area":"mllm"},{"id":"2510.15068","title":"Sequential Comics for Jailbreaking Multimodal Large Language Models via Structured Visual Storytelling","created":"2025-10-16","cited_by_count":2,"area":"mllm"},{"id":"2511.16229","title":"Q-MLLM: Vector Quantization for Robust Multimodal Large Language Model Security","created":"2025-11-20","cited_by_count":2,"area":"mllm"},{"id":"2601.15698","title":"Beyond Visual Safety: Jailbreaking Multimodal Large Language Models for Harmful Image Generation via Semantic-Agnostic Inputs","created":"2026-01-22","cited_by_count":2,"area":"mllm"},{"id":"2604.12616","title":"Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs","created":"2026-04-14","cited_by_count":2,"area":"mllm"},{"id":"2412.16555","title":"Divide and Conquer: A Hybrid Strategy Defeats Multimodal Large Language Models","created":"2024-12-21","cited_by_count":1,"area":"mllm"},{"id":"2505.21556","title":"Benign-to-Toxic Jailbreaking: Inducing Harmful Responses from Harmless Prompts","created":"2025-05-26","cited_by_count":1,"area":"mllm"},{"id":"2506.00534","title":"The Security Threat of Compressed Projectors in Large Vision-Language Models","created":"2025-05-31","cited_by_count":1,"area":"mllm"},{"id":"2506.09067","title":"Enhancing the Safety of Medical Vision-Language Models by Synthetic Demonstrations","created":"2025-06-08","cited_by_count":1,"area":"mllm"},{"id":"2509.25896","title":"LLaVAShield: Safeguarding Multimodal Multi-Turn Dialogues in Vision-Language Models","created":"2025-09-30","cited_by_count":1,"area":"mllm"},{"id":"2510.20223","title":"Beyond Text: Multimodal Jailbreaking of Vision-Language and Audio Models through Perceptually Simple Transformations","created":"2025-10-23","cited_by_count":1,"area":"mllm"},{"id":"2601.12505","title":"DoPE: Decoy Oriented Perturbation Encapsulation Human-Readable, AI-Hostile Documents for Academic Integrity","created":"2026-01-18","cited_by_count":1,"area":"mllm"},{"id":"2603.00565","title":"MIDAS: Multi-Image Dispersion and Semantic Reconstruction for Jailbreaking MLLMs","created":"2026-02-28","cited_by_count":1,"area":"mllm"},{"id":"2606.26566","title":"Adversarial Diffusion Across Modalities: A Fusion Survey of Attacks, Defenses, and Evaluation for Text, Vision, and Vision-Language Models","created":"2026-06-25","cited_by_count":1,"area":"mllm"},{"id":"2607.11228","title":"DeepBias: Adaptive In-depth Probing of Social Biases in LVLMs","created":"2026-07-13","cited_by_count":1,"area":"mllm"},{"id":"2603.02482","title":"MUSE: A Run-Centric Platform for Multimodal Unified Safety Evaluation of Large Language Models","created":"2026-03-03","cited_by_count":0,"area":"mllm"},{"id":"2603.15259","title":"Directional Embedding Smoothing for Robust Vision Language Models","created":"2026-03-16","cited_by_count":0,"area":"mllm"},{"id":"2604.10299","title":"Seeing No Evil: Blinding Large Vision-Language Models to Safety Instructions via Adversarial Attention Hijacking","created":"2026-04-11","cited_by_count":0,"area":"mllm"},{"id":"2605.05709","title":"Conceal, Reconstruct, Jailbreak: Exploiting the Reconstruction-Concealment Tradeoff in MLLMs","created":"2026-05-07","cited_by_count":0,"area":"mllm"},{"id":"2605.14750","title":"EVA: Editing for Versatile Alignment against Jailbreaks","created":"2026-05-14","cited_by_count":0,"area":"mllm"},{"id":"2606.24388","title":"PHANTOM: A Large-Scale Dataset of Multimodal Adversarial Attacks for Vision-Language Models","created":"2026-06-23","cited_by_count":0,"area":"mllm"},{"id":"2607.02961","title":"Overloading Large Vision-Language Models for Jailbreaking","created":"2026-07-03","cited_by_count":0,"area":"mllm"},{"id":"2607.21600","title":"Securing Multimodal AI through Internal Information Decomposition","created":"2026-05-03","cited_by_count":0,"area":"mllm"},{"id":"2608.22312","title":"Text-Anchored Semantic Perturbations for Transferable Jailbreak Attacks on Multimodal Large Language Models","created":"2026-08-23","cited_by_count":0,"area":"mllm"}],"next_cursor":null}