{"total":19,"rows":[{"id":"2406.04031","title":"Jailbreak Vision Language Models via Bi-Modal Adversarial Prompt","created":"2024-06-06","cited_by_count":109,"area":"mllm"},{"id":"2404.10618","title":"Private Attribute Inference from Images with Vision-Language Models","created":"2024-04-16","cited_by_count":37,"area":"mllm"},{"id":"2601.01592","title":"OpenRT: An Open-Source Red Teaming Framework for Multimodal LLMs","created":"2026-01-04","cited_by_count":21,"area":"mllm"},{"id":"2410.01438","title":"The Great Contradiction Showdown: How Jailbreak and Stealth Wrestle in Vision-Language Models?","created":"2024-10-02","cited_by_count":4,"area":"mllm"},{"id":"2508.09218","title":"Towards Effective MLLM Jailbreaking Through Balanced On-Topicness and OOD-Intensity","created":"2025-08-11","cited_by_count":4,"area":"mllm"},{"id":"2510.04257","title":"AgentTypo: Adaptive Typographic Prompt Injection Attacks against Black-box Multimodal Agents","created":"2025-10-05","cited_by_count":4,"area":"mllm"},{"id":"2512.18264","title":"Who Can See Through You? Adversarial Shielding Against VLM-Based Attribute Inference Attacks","created":"2025-12-20","cited_by_count":3,"area":"mllm"},{"id":"2603.22882","title":"TreeTeaming: Autonomous Red-Teaming of Vision-Language Models via Hierarchical Strategy Exploration","created":"2026-03-24","cited_by_count":3,"area":"mllm"},{"id":"2505.23266","title":"Disrupting Vision-Language Model-Driven Navigation Services via Adversarial Object Fusion","created":"2025-05-29","cited_by_count":2,"area":"mllm"},{"id":"2510.15068","title":"Sequential Comics for Jailbreaking Multimodal Large Language Models via Structured Visual Storytelling","created":"2025-10-16","cited_by_count":2,"area":"mllm"},{"id":"2511.16229","title":"Q-MLLM: Vector Quantization for Robust Multimodal Large Language Model Security","created":"2025-11-20","cited_by_count":2,"area":"mllm"},{"id":"2601.15698","title":"Beyond Visual Safety: Jailbreaking Multimodal Large Language Models for Harmful Image Generation via Semantic-Agnostic Inputs","created":"2026-01-22","cited_by_count":2,"area":"mllm"},{"id":"2604.12616","title":"Every Picture Tells a Dangerous Story: Memory-Augmented Multi-Agent Jailbreak Attacks on VLMs","created":"2026-04-14","cited_by_count":2,"area":"mllm"},{"id":"2503.11742","title":"Safe Vision-Language Models via Unsafe Weights Manipulation","created":"2025-03-14","cited_by_count":1,"area":"mllm"},{"id":"2505.21556","title":"Benign-to-Toxic Jailbreaking: Inducing Harmful Responses from Harmless Prompts","created":"2025-05-26","cited_by_count":1,"area":"mllm"},{"id":"2607.11228","title":"DeepBias: Adaptive In-depth Probing of Social Biases in LVLMs","created":"2026-07-13","cited_by_count":1,"area":"mllm"},{"id":"2604.10299","title":"Seeing No Evil: Blinding Large Vision-Language Models to Safety Instructions via Adversarial Attention Hijacking","created":"2026-04-11","cited_by_count":0,"area":"mllm"},{"id":"2605.07399","title":"GPO-V: Jailbreak Diffusion Vision Language Model by Global Probability Optimization","created":"2026-05-08","cited_by_count":0,"area":"mllm"},{"id":"2608.22312","title":"Text-Anchored Semantic Perturbations for Transferable Jailbreak Attacks on Multimodal Large Language Models","created":"2026-08-23","cited_by_count":0,"area":"mllm"}],"next_cursor":null}