Towards Generic and Controllable Attacks Against Object Detection