{"total":29,"rows":[{"id":"2406.04031","title":"Jailbreak Vision Language Models via Bi-Modal Adversarial Prompt","created":"2024-06-06","cited_by_count":109,"area":"mllm"},{"id":"2407.07403","title":"A Survey of Attacks on Large Vision-Language Models: Resources, Advances, and Future Trends","created":"2024-07-10","cited_by_count":84,"area":"mllm"},{"id":"2407.01599","title":"JailbreakZoo: Survey, Landscapes, and Horizons in Jailbreaking Large Language and Vision-Language Models","created":"2024-06-26","cited_by_count":70,"area":"mllm"},{"id":"2502.14881","title":"A Survey of Safety on Large Vision-Language Models: Attacks, Defenses and Evaluations","created":"2025-02-14","cited_by_count":67,"area":"mllm"},{"id":"2403.12445","title":"Boosting Transferability in Vision-Language Attacks via Diversification along the Intersection Region of Adversarial Trajectory","created":"2024-03-19","cited_by_count":36,"area":"mllm"},{"id":"2412.00114","title":"SceneTAP: Scene-Coherent Typographic Adversarial Planner against Vision-Language Models in Real-World Environments","created":"2024-11-28","cited_by_count":22,"area":"mllm"},{"id":"2404.05264","title":"Unbridled Icarus: A Survey of the Potential Perils of Image Inputs in Multimodal Large Language Model Security","created":"2024-04-08","cited_by_count":19,"area":"mllm"},{"id":"2409.13174","title":"Manipulation Facing Threats: Evaluating Physical Vulnerabilities in End-to-End Vision Language Action Models","created":"2024-09-20","cited_by_count":18,"area":"mllm"},{"id":"2411.02669","title":"Semantic-Aligned Adversarial Evolution Triangle for High-Transferability Vision-Language Attack","created":"2024-11-04","cited_by_count":18,"area":"mllm"},{"id":"2404.16557","title":"Energy-Latency Manipulation of Multi-modal Large Language Models via Verbose Samples","created":"2024-04-25","cited_by_count":14,"area":"mllm"},{"id":"2412.08108","title":"Exploiting Vision Encoder Vulnerabilities for Universal Adversarial Perturbations on Large Vision-Language Models","created":"2024-12-11","cited_by_count":11,"area":"mllm"},{"id":"2405.20775","title":"Medical MLLM is Vulnerable: Cross-Modality Jailbreak and Mismatched Attacks on Medical Multimodal Large Language Models","created":"2024-05-26","cited_by_count":10,"area":"mllm"},{"id":"2505.19610","title":"JailBound: Jailbreaking Internal Safety Boundaries of Vision-Language Models","created":"2025-05-26","cited_by_count":10,"area":"mllm"},{"id":"2505.17440","title":"VEAttack: Downstream-agnostic Vision Encoder Attack against Large Vision Language Models","created":"2025-05-23","cited_by_count":8,"area":"mllm"},{"id":"2501.01042","title":"Transferability of Adversarial Attacks in Video-based MLLMs: A Cross-modal Image-to-Video Approach","created":"2025-01-02","cited_by_count":7,"area":"mllm"},{"id":"2407.09050","title":"Refusing Safe Prompts for Multi-modal Large Language Models","created":"2024-07-12","cited_by_count":6,"area":"mllm"},{"id":"2405.20090","title":"Transfer Attack for Bad and Good: Explain and Boost Adversarial Transferability across Multimodal Large Language Models","created":"2024-05-30","cited_by_count":5,"area":"mllm"},{"id":"2602.15927","title":"Visual Memory Injection Attacks for Multi-Turn Conversations","created":"2026-02-17","cited_by_count":2,"area":"mllm"},{"id":"2502.19672","title":"Improving Adversarial Transferability in MLLMs via Dynamic Vision-Language Alignment Attack","created":"2025-02-27","cited_by_count":1,"area":"mllm"},{"id":"2507.07709","title":"One Object, Multiple Lies: A Benchmark for Cross-task Adversarial Attack on Unified Vision-Language Models","created":"2025-07-10","cited_by_count":1,"area":"mllm"},{"id":"2506.22982","title":"Revisiting CroPA: A Reproducibility Study and Enhancements for Cross-Prompt Adversarial Transferability in Vision-Language Models","created":"2025-06-28","cited_by_count":0,"area":"mllm"},{"id":"2601.12304","title":"A Two-Stage Globally-Diverse Adversarial Attack for Vision-Language Pre-training Models","created":"2026-01-18","cited_by_count":0,"area":"mllm"},{"id":"2603.15940","title":"Do Not Leave a Gap: Hallucination-Free Object Concealment in Vision-Language Models","created":"2026-03-16","cited_by_count":0,"area":"mllm"},{"id":"2605.28609","title":"JECA^2: Judgment-Explanation Consistent Adversarial Attack against Forensic Vision-Language Models","created":"2026-05-27","cited_by_count":0,"area":"mllm"},{"id":"2606.10571","title":"Improving Adversarial Transferability on Vision-Language Pre-training Models via Surrogate-Specific Bias Correction","created":"2026-06-09","cited_by_count":0,"area":"mllm"},{"id":"2606.22779","title":"DE-FIVE: Detecting Malicious Image Prompts via Fourier Features and Image Vector Embeddings","created":"2026-06-22","cited_by_count":0,"area":"mllm"},{"id":"2607.07375","title":"On Adversarial Vulnerability of Vision-Language Models through the Lens of Intermediate Spectral Subspaces","created":"2026-07-08","cited_by_count":0,"area":"mllm"},{"id":"2609.00788","title":"Forbid Your Attention: Fooling Multimodal Large Language Models by Selectively Removing Intrinsic Focus in Spectral Domain","created":"2026-09-01","cited_by_count":0,"area":"mllm"},{"id":"2609.35002","title":"Still There, No Longer Seen: Exposing Compression-Induced Risk in Large Vision-Language Models","created":"2026-09-28","cited_by_count":0,"area":"mllm"}],"next_cursor":null}