cmdpad - execute commands when a key is pressed, released or hold down. Should be started from /etc/rc or /etc/rc.local. To run it as deamon you need to start it with '&'. All logs are printed to standard out and standard error (to write the log to disk use cmdpad > /var/log/cmdpad). Cmdpad searches for /etc/cmdpad.conf and load the key bindings. Then wait for key event and check each command to see if it should be run.
Local users can found and use exploit attacks to run commands at root privileges.
If one or more users (or pet :) have the access to the USB keyboard (or mouse, joystick, gamepad) can trigger events without your controls.