European companies have sold controversial surveillance technologies to countries known for violating human rights, a new report has found.